← Vulnerability feed

Vulnerability record · CVE-1999-1394 · published 2 July 1999

CVE-1999-1394: Bsd vulnerability

Bsd · Bsd

BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.

2.1 CVSS 2.0 Low EPSS 0.61% · top 53.0%
2.1CVSS 2.0 base score
0.61%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.

AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=93094058620450&w=2
http://www.securityfocus.com/bid/510
http://marc.info/?l=bugtraq&m=93094058620450&w=2
http://www.securityfocus.com/bid/510

Track CVE-1999-1394 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2001-0670Bsd vulnerabilityBuffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code v…EPSS 6.6%7.2CVE-1999-1471Bsd vulnerabilityBuffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GEC…EPSS 0.50%7.1CVE-2008-4609Bsd vulnerabilityThe TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems…EPSS 32%5.0CVE-2014-7250Bsd vulnerabilityThe TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, …EPSS 4.7%5.0CVE-1999-1098Bsd vulnerabilityVulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.EPSS 1.4%2.1CVE-1999-1102Sgi irix vulnerabilitylpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlin…EPSS 0.43%2.1CVE-1999-1214Sgi irix vulnerabilityThe asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local us…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-1999-1394), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.