CVE-1999-0491
bash < 2.04 - Local Command Execution via Directory Name Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-0491. PoCs published by Shadow.
AI-analyzed exploit summary This exploit leverages a vulnerability in bash where commands embedded in directory names are executed when the prompt (PS1) contains '\w' or '\W'. The PoC creates a directory with a malicious name that, when entered, executes arbitrary commands.
Description
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Exploits (1)
This exploit leverages a vulnerability in bash where commands embedded in directory names are executed when the prompt (PS1) contains '\w' or '\W'. The PoC creates a directory with a malicious name that, when entered, executes arbitrary commands.