7.2

CVE-1999-0038

Buffer overflow in xlock program allows local users to execute commands as root.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Data General ≫ Dg Ux Version 1.0
Data General ≫ Dg Ux Version 2.0
Data General ≫ Dg Ux Version 3.0
Data General ≫ Dg Ux Version 4.0
Data General ≫ Dg Ux Version 5.0
Data General ≫ Dg Ux Version 6.0
Data General ≫ Dg Ux Version 7.0
Sgi ≫ Irix Version 5.0
Sgi ≫ Irix Version 5.0.1
Sgi ≫ Irix Version 5.1
Sgi ≫ Irix Version 5.1.1
Sgi ≫ Irix Version 5.2
Sgi ≫ Irix Version 5.3
Sgi ≫ Irix Version 5.3 Edition xfs
Sgi ≫ Irix Version 6.0
Sgi ≫ Irix Version 6.0.1
Sgi ≫ Irix Version 6.0.1 Edition xfs
Sgi ≫ Irix Version 6.1
Sgi ≫ Irix Version 6.3
Sgi ≫ Irix Version 6.4
Bsdi ≫ Bsd Os Version 2.1
Debian ≫ Debian Linux Version 0.93
Debian ≫ Debian Linux Version 1.1
Debian ≫ Debian Linux Version 1.2
Debian ≫ Debian Linux Version 1.3
Hp ≫ Hp-ux Version 10.00
Hp ≫ Hp-ux Version 10.01
Hp ≫ Hp-ux Version 10.08
Hp ≫ Hp-ux Version 10.10
Hp ≫ Hp-ux Version 10.16
Hp ≫ Hp-ux Version 10.20
Hp ≫ Hp-ux Version 10.24
Hp ≫ Hp-ux Version 10.30
Hp ≫ Hp-ux Version 10.34
Ibm ≫ Aix Version 3.2
Ibm ≫ Aix Version 4.1
Ibm ≫ Aix Version 4.2
Sun ≫ Solaris Version 2.4 Edition x86
Sun ≫ Solaris Version 2.5 Edition x86
Sun ≫ Solaris Version 2.5.1 Edition ppc
Sun ≫ Solaris Version 2.5.1 Edition x86
Sun ≫ Sunos Version 5.3
Sun ≫ Sunos Version 5.4
Sun ≫ Sunos Version 5.5
Sun ≫ Sunos Version 5.5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.32% 0.672
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CISA-ADP 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038