CVE-1999-1434: Slackware Linux

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.

Affected products

• Slackware Slackware Linux: version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.5 only

Published 1998-07-13. Last modified 2026-06-16.