Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0948. PoCs published by UNYUN.
AI-analyzed exploit summary This exploit targets a buffer overflow in the 'uum' program (part of the Canna Japanese input system) via the '-D' option. It leverages the SUID root binary to execute arbitrary code, dropping a root shell by compiling and executing a malicious C program.
Description
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by UNYUN · clocalunix
https://www.exploit-db.com/exploits/19582
This exploit targets a buffer overflow in the 'uum' program (part of the Canna Japanese input system) via the '-D' option. It leverages the SUID root binary to execute arbitrary code, dropping a root shell by compiling and executing a malicious C program.
Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target:
Canna uum (versions with vulnerable '-D' option handling)
No auth needed
Prerequisites:
SUID root 'uum' binary · Write access to /tmp
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/757
Scores
EPSS
0.0069
EPSS Percentile
47.8%
Details
Status
published
Products (10)
sgi/irix
5.3
sgi/irix
6.2
sgi/irix
6.3
sgi/irix
6.4
sgi/irix
6.5
sun/solaris
2.6
sun/solaris
7.0
sun/sunos
sun/sunos
5.7
turbolinux/turbolinux
4.2
Published
Nov 02, 1999
Tracked Since
Feb 18, 2026