Debian Security Advisory

bash -- problem with very long pathnames

Date Reported:

09 Sep 1998

Affected Packages:

bash

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-1999-1048.

More information:

We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd() in all places, which could be exploited.

We recommend you upgrade your bash package immediately.

Fixed in:

All - (in release 2.0) 2.01.1-4