CVE-1999-1383

CVE-1999-1383 describes a local privilege escalation vulnerability affecting GNU Bash before version 1.14.7 and tcsh 6.05. It allows local users to execute arbitrary commands by creating directories with shell metacharacters (back-ticks) in their names, which are then processed and executed when the shell expands filenames using the \w option in the PS1 variable. This vulnerability has a medium severity CVSS score of 4.6, indicating a local attack vector with low complexity, and potential for partial impact on confidentiality, integrity, and availability. The FAUCET Risk Score is 13/100, suggesting a relatively low overall risk. There is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and no community discussion or media coverage surrounding this CVE. It is not listed in the CISA Known Exploited Vulnerabilities Catalog.