CVE-1999-0556

Two or more Unix accounts have the same UID

published February 4, 2000

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

⚠️ A surprise double booking in your Unix accounts! When two or more accounts share the same UID, chaos can ensue. 🔥 Think of it like having two people with the same name booking a room at a hotel without checking IDs — one might accidentally steal the other’s reservation! This could lead to identity confusion where actions from one account may affect the other. For example, a user could inadvertently or maliciously access files or permissions meant for another account, creating an unintentional security breach.

Put simply

Think of it like having two people with the same name booking a room at a hotel without checking IDs — one might accidentally steal the other’s reservation! This vulnerability occurs when multiple Unix accounts are assigned the same user identifier (UID), allowing them to share permissions and resources in ways that can lead to unauthorized access and interference.

What to do

This could lead to identity confusion where actions from one account may affect the other. For example, a user could inadvertently or maliciously access files or permissions meant for another account, creating an unintentional security breach. To remediate, carefully audit your user accounts to ensure each one has a unique UID. After identifying duplicates, reassign unique UIDs and update any necessary file permissions accordingly. You've got this! With a little housekeeping, you can ensure your Unix environment is as secure as a well-guarded hotel. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01891 · 79.4th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    Two or more Unix accounts have the same UID
    cvelistv5