How severe is CVE-1999-0035?

CVE-1999-0035 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-1999-0035 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-1999-0035?

CVE-1999-0035 primarily affects Gnu Inet. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-1999-0035?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-1999-0035 published?

CVE-1999-0035 was published on 1997-05-29 and last updated on 2026-06-16.

CVE-1999-0035

CVE-1999-0035 is a medium-severity vulnerability in Gnu Inet with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-364.

Key facts

Severity: Medium (CVSS 3.x base score 5.4)
CVSS v2: 5.1
EPSS exploit prediction: 1% (53rd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-364
Affected product: Gnu Inet
Published: 1997-05-29
Last modified: 2026-06-16

Description

Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.

Frequently asked questions

What is CVE-1999-0035?: Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
How severe is CVE-1999-0035?: CVE-1999-0035 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-1999-0035 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-1999-0035?: CVE-1999-0035 primarily affects Gnu Inet. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-1999-0035?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-1999-0035 published?: CVE-1999-0035 was published on 1997-05-29 and last updated on 2026-06-16.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0035

Affected products (2)

cpe:2.3:a:gnu:inet:5.01:*:*:*:*:*:*:*
cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

More vulnerabilities in Gnu Inet

CVE-1999-0017 — High (CVSS 7.5): FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-1999-0016 — Medium (CVSS 5.0): Land IP denial of service.
CVE-1999-0216 — Medium (CVSS 5.0): Denial of service of inetd on Linux through SYN and RST packets.

All CVEs affecting Gnu Inet →

Other CWE-364 vulnerabilities

CVE-2026-24792 — High (CVSS 8.1): in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
CVE-2024-6409 — High (CVSS 7.0): A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote…
CVE-2026-42002 — Medium (CVSS 5.9): Concurrency and locking defects in GSS-TSIG
CVE-2026-27766 — Medium (CVSS 5.5): in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
CVE-2020-14317 — Medium (CVSS 5.5): It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise…
CVE-2025-4598 — Medium (CVSS 4.7): A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and…

Browse all CWE-364 vulnerabilities →