CVE-1999-0038

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Apr 26, 1997
Updated: Nov 20, 2024
CWE ID 120

Summary

CVE-1999-0038 is a significant buffer overflow vulnerability affecting the xlock program. This issue allows local users to execute arbitrary commands with root privileges by exploiting a buffer overflow vulnerability in the software. An attacker can manipulate input data, causing the buffer to overflow and allowing the execution of malicious code. This vulnerability poses a serious risk to systems running the affected version of xlock, as an attacker can gain complete control over the system. It is strongly recommended that users update their xlock software to a version that addresses this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX
  • HP-UX family of operating systems
  • SunOS
  • Debian
  • IBM AIX

Affected Vendors

  • Debian
  • IBM Corporation
  • Oracle Corp
  • Saskatchewan Government Insurance
  • HP