00192Vendor advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192 CVE-1999-0691
DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer Overflow
Record summary
CVE-1999-0691 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer OverflowExploitDB exploitby Job de Haas of ITSXNot analyzed1 file
References
5635vdb entry
http://www.securityfocus.com/bid/635 HPSBUX9909-103Vendor advisory
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-1999-0691 oval:org.mitre.oval:def:3078vdb entrysignature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078