CVE-1999-1048

CVE-1999-1048 describes a buffer overflow vulnerability in various versions of Bash, including 2.0.0 and 1.4.17, affecting Debian and Red Hat Linux distributions. A local attacker can exploit this by creating an excessively long directory name, which, when displayed in the password prompt via the PS1 environmental variable, triggers the overflow and allows for privilege escalation. The vulnerability has a medium severity CVSS score of 4.6, indicating low attack complexity and potential for partial confidentiality, integrity, and availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.