Back to Database
Status published
High
CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly...
Vulnerability Description
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-1999-1434
Credits & Attribution
No credits recorded in the NVD database.
More from slackware
View All →CVE-2013-7172
Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on...
High
7.8
CVE-2013-7171
Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2,...
Critical
9.8
CVE-2007-0823
xterm on Slackware Linux 10.2 stores information that had been...
Low
1.9
CVE-2003-0335
rc.M in Slackware 9.0 calls quotacheck with the -M option,...
High
7.5
CVE-2003-0195
CUPS before 1.1.19 allows remote attackers to cause a denial...
Medium
5
Affected Vendor
slackware
View all reports →Affected Software
slackware linux
Vulnerable Versions:
3.1, 3.2, 3.3, 3.4, 3.5
Timeline
Official Publish:
September 12th, 2001
Last Modified:
August 1st, 2024
Added to House:
July 17th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.