CVE-1999-1517

High CVSS 7.2

Published 1999-11-01 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1517, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.

Sources

NVD record for CVE-1999-1517

CVSS vector: AV:L/AC:L/Au:N/C:C/I:C/A:C