CVE-1999-1491

CVE-1999-1491 affects Red Hat 2.1 via abuse.console which uses relative pathnames to locate and execute the undrv program. The underlying issue is path-based execution that allows local users to run arbitrary commands by pointing to a Trojan horse program, enabling complete confidentiality, integ...

abuseconsole.sh

There is a security hole in RedHat 2.1, which installs the game abuse, /usr/lib/games/abuse/abuse.console suid root. The abuse.console program loads its files without absolute pathnames, assuming the user is running abuse from the /usr/lib/games/abuse directory. One of these files in the undrv...