8.4

CVE-1999-0038

Buffer overflow in xlock program allows local users to execute commands as root.

Data is provided by the National Vulnerability Database (NVD)
Data General ≫ Dg Ux Version1.0
Data General ≫ Dg Ux Version2.0
Data General ≫ Dg Ux Version3.0
Data General ≫ Dg Ux Version4.0
Data General ≫ Dg Ux Version5.0
Data General ≫ Dg Ux Version6.0
Data General ≫ Dg Ux Version7.0
Sgi ≫ Irix Version5.0
Sgi ≫ Irix Version5.0.1
Sgi ≫ Irix Version5.1
Sgi ≫ Irix Version5.1.1
Sgi ≫ Irix Version5.2
Sgi ≫ Irix Version5.3
Sgi ≫ Irix Version5.3 Editionxfs
Sgi ≫ Irix Version6.0
Sgi ≫ Irix Version6.0.1
Sgi ≫ Irix Version6.0.1 Editionxfs
Sgi ≫ Irix Version6.1
Sgi ≫ Irix Version6.3
Sgi ≫ Irix Version6.4
Bsdi ≫ Bsd Os Version2.1
Debian ≫ Debian Linux Version0.93
Debian ≫ Debian Linux Version1.1
Debian ≫ Debian Linux Version1.2
Debian ≫ Debian Linux Version1.3
Hp ≫ Hp-ux Version10.00
Hp ≫ Hp-ux Version10.01
Hp ≫ Hp-ux Version10.08
Hp ≫ Hp-ux Version10.10
Hp ≫ Hp-ux Version10.16
Hp ≫ Hp-ux Version10.20
Hp ≫ Hp-ux Version10.24
Hp ≫ Hp-ux Version10.30
Hp ≫ Hp-ux Version10.34
Ibm ≫ Aix Version3.2
Ibm ≫ Aix Version4.1
Ibm ≫ Aix Version4.2
Sun ≫ Solaris Version2.4 Editionx86
Sun ≫ Solaris Version2.5 Editionx86
Sun ≫ Solaris Version2.5.1 Editionppc
Sun ≫ Solaris Version2.5.1 Editionx86
Sun ≫ Sunos Version5.3
Sun ≫ Sunos Version5.4
Sun ≫ Sunos Version5.5
Sun ≫ Sunos Version5.5.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.268
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.