# CVE-1999-1490: xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.

Source: https://junglewise.ai/threats/cve-1999-1490-xosview-1-5-1-in-red-hat-5-1-allows-local-users-to-gain-root  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1998-05-28. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-1999-1490 · Severity: high · CVSS 7.2 · Published 1998-05-28

xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.

Technologies: [Redhat Linux](https://junglewise.ai/threats/technologies/linux). Vendors: [Redhat](https://junglewise.ai/threats/vendors/redhat).

## Quick answers

**Is CVE-1999-1490 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-1490 being exploited in the wild.

**How severe is CVE-1999-1490?** High severity, with a CVSS score of 7.2, published 28 May 1998.

**Which products and versions are affected?** Redhat Linux. The advisory does not name versions.

**Is there a fix for CVE-1999-1490?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-1999-1490?** Check whether you run Redhat Linux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Redhat Linux

## References

- [http://marc.info/?l=bugtraq&m=90221101926021&w=2](http://marc.info/?l=bugtraq&m=90221101926021&w=2)
- [http://marc.info/?l=bugtraq&m=90221101926034&w=2](http://marc.info/?l=bugtraq&m=90221101926034&w=2)
- [http://www.iss.net/security_center/static/8787.php](http://www.iss.net/security_center/static/8787.php)
- [http://www.securityfocus.com/bid/362](http://www.securityfocus.com/bid/362)

## Related threats

- [Red Hat Linux 5 symlink attack in ifdhcpc-done script](https://junglewise.ai/threats/cve-1999-1407-red-hat-linux-5-symlink-attack-in-ifdhcpc-done-script)
- [Multiple Linux Distributions sort utility symlink vulnerability in /tmp](https://junglewise.ai/threats/cve-1999-1095-multiple-linux-distributions-sort-utility-symlink-vulnerability-in)
- [Bellcore metamail arbitrary command execution via message headers](https://junglewise.ai/threats/cve-1999-0037-bellcore-metamail-arbitrary-command-execution-via-message-headers)
- [Linux rcp arbitrary file overwrite via UID 65535 integer signedness error](https://junglewise.ai/threats/cve-1999-1299-linux-rcp-arbitrary-file-overwrite-via-uid-65535-integer)
- [Vixie Cron buffer overflow in library](https://junglewise.ai/threats/cve-1999-0297-vixie-cron-buffer-overflow-in-library)