CVE-1999-0138: Apple A Ux

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.

Affected products

• Apple A Ux: version 3.1.1 only
• Digital Osf 1: version 1.3 only
• Freebsd Freebsd: version 2.0 only; version 2.0.5 only; version 2.1.0 only
• HP HP-Ux: version 8 only; version 9 only; version 10 only
• IBM Aix: version 3.2.5 only; version 4 only
• Linux Linux Kernel: version 1.2.0 only; version 2.0 only
• Nec Asl Ux 4800: any version
• Nec Ews-Ux V: version 4.2 only; version 4.2mp only
• Nec Up-Ux V: version 4.2mp only

Published 1996-06-26. Last modified 2026-06-16.