Published: 13/09/1999 Updated: 30/10/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cde cde 2.0
cde cde 2.1
cde cde 1.1
cde cde 1.2
cde cde 1.0.1
cde cde 1.0.2
ibm aix 4.1.2
ibm aix 4.1.3
ibm aix 4.1.4
sun sunos 5.4
sun solaris 2.4
ibm aix 4.1
ibm aix 4.1.1
ibm aix 4.3.1
ibm aix 4.3.2
sun sunos 5.7
sun solaris 7.0
digital unix 4.0e
digital unix 4.0f
ibm aix 4.2.1
ibm aix 4.3
sun solaris 2.5.1
sun solaris 2.6
digital unix 4.0d
ibm aix 4.1.5
ibm aix 4.2
sun sunos 5.5
sun sunos 5.5.1

/* source: wwwsecurityfocuscom/bid/635/info TRU64/DIGITAL UNIX 40 d/e/f,AIX <= 432,Common Desktop Environment <= 21,IRIX <= 6514,Solaris <= 70 dtaction Userflag Buffer Overflow Vulnerability CDE is the Common Desktop Environment, an implementation of a Desktop Manager for systems that run X It is distributed with va ...

Hi there 👋 Trails Senior Security Engineer, GREE 🇯🇵 2012, Now ~ Security Manager, LINE 🇯🇵 2008, 4 and half years Co-founder, PanicSecurity 🇰🇷 (PS ScanW3B) 2004 Security Engineer, Webzen 🇰🇷 2003, 2years Security Consultant, HackersLab 🇰🇷 (The first security consulting firm in Korea) 2001, 2years Founder, IGRUS, Inha Group of Research for UNIX

NVD-CWE-Other http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103 http://www.securityfocus.com/bid/635 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078 https://nvd.nist.gov https://github.com/truefinder/truefinder https://www.exploit-db.com/exploits/19497/

CVE-1999-0691

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect