10
CVSSv2

CVE-1999-0101

Published: 10/12/1996 Updated: 09/09/2008
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm aix 3.2

ibm aix 4.1

ibm aix 4.2

Exploits

source: wwwsecurityfocuscom/bid/6853/info A vulnerability has been discovered in multiple vendor implementations of the 'gethostbyname()' library function, which is used to resolve network addresses The 'gethostbyname()' function fails to implement sufficient bounds checking on data copied into local memory buffers Under some circumst ...