7.8

CVE-1999-0022

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Data is provided by the National Vulnerability Database (NVD)
Sgi ≫ Irix Version5.0
Sgi ≫ Irix Version5.0.1
Sgi ≫ Irix Version5.1
Sgi ≫ Irix Version5.1.1
Sgi ≫ Irix Version5.2
Sgi ≫ Irix Version5.3
Sgi ≫ Irix Version5.3 Editionxfs
Sgi ≫ Irix Version6.0
Sgi ≫ Irix Version6.0.1
Sgi ≫ Irix Version6.0.1 Editionxfs
Sgi ≫ Irix Version6.1
Sgi ≫ Irix Version6.2
Sgi ≫ Irix Version6.3
Sgi ≫ Irix Version6.4
Bsdi ≫ Bsd Os Version1.1
Freebsd ≫ Freebsd Version2.0
Freebsd ≫ Freebsd Version2.0.5
Freebsd ≫ Freebsd Version2.1.0
Hp ≫ Hp-ux Version10.00
Ibm ≫ Aix Version3.1
Ibm ≫ Aix Version3.2
Ibm ≫ Aix Version3.2.4
Ibm ≫ Aix Version3.2.5
Ibm ≫ Aix Version4.1
Ibm ≫ Aix Version4.1.1
Ibm ≫ Aix Version4.1.2
Ibm ≫ Aix Version4.1.3
Ibm ≫ Aix Version4.1.4
Ibm ≫ Aix Version4.1.5
Ibm ≫ Aix Version4.2
Sun ≫ Solaris Version4.1.3
Sun ≫ Sunos Version4.1.1
Sun ≫ Sunos Version4.1.2
Sun ≫ Sunos Version4.1.3u1
Sun ≫ Sunos Version5.0
Sun ≫ Sunos Version5.1
Sun ≫ Sunos Version5.2
Sun ≫ Sunos Version5.3
Sun ≫ Sunos Version5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.486
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.