Back to Database
Status published
High
CVE-1999-1422
The default configuration of Slackware 3.4, and possibly other versions,...
Vulnerability Description
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-1999-1422
Credits & Attribution
No credits recorded in the NVD database.
More from slackware
View All →CVE-2013-7172
Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on...
High
7.8
CVE-2013-7171
Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2,...
Critical
9.8
CVE-2007-0823
xterm on Slackware Linux 10.2 stores information that had been...
Low
1.9
CVE-2003-0335
rc.M in Slackware 9.0 calls quotacheck with the -M option,...
High
7.5
CVE-2003-0195
CUPS before 1.1.19 allows remote attackers to cause a denial...
Medium
5
Affected Vendor
slackware
View all reports →Affected Software
slackware linux
Vulnerable Versions:
2.0.35, 3.4
Timeline
Official Publish:
September 12th, 2001
Last Modified:
August 1st, 2024
Added to House:
July 17th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.