CVE-1999-1496: Debian Linux

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.

Affected products

• Debian Debian Linux: version 2.1 only
• Red Hat Linux: version 6.0 only
• Todd Miller Sudo: version 1.5 only

Published 1999-06-08. Last modified 2026-06-16.