CVE-1999-0298: Slackware Linux

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.

Affected products

• Slackware Slackware Linux: version 2.1 only; version 2.2 only; version 2.3 only
• Sun Sunos: version 4.1.3 only; version 4.1.4 only

Published 1997-02-05. Last modified 2026-06-16.