CVE-1999-1299

rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is…

published September 12, 2001

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

⚠️ A user with a UID of 65535 can overwrite any file they touch! It's like giving a toddler the keys to a candy store and expecting them to just look! 🍭 Imagine a restaurant where anybody with a special badge can swap the chef’s special ingredients with whatever they want—chaos would ensue if a 'nobody' user gets in and starts playing chef! 🍽️ This vulnerability allows a malicious user to overwrite crucial files on the system, potentially leading to data corruption or unauthorized changes. In the wrong hands, it’s a recipe for disaster, as critical system functions could be compromised!

Put simply

Imagine a restaurant where anybody with a special badge can swap the chef’s special ingredients with whatever they want—chaos would ensue if a 'nobody' user gets in and starts playing chef! 🍽️ This flaw in rcp on various Linux systems, including Red Hat 4.0, allows users with a UID of 65535 (interpreted as -1) to bypass file ownership restrictions, leading to arbitrary file overwrites.

What to do

This vulnerability allows a malicious user to overwrite crucial files on the system, potentially leading to data corruption or unauthorized changes. In the wrong hands, it’s a recipe for disaster, as critical system functions could be compromised! To mitigate this risk, restrict access for users with UID 65535 and regularly audit user permissions. Consider disabling rcp if it's not essential to your operations, and explore more secure file transfer methods like scp. You've got this! Take these steps, and you’ll be one step closer to a fortified system! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01840 · 78.9th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is…
    cvelistv5