CVE-1999-0038
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Apr 26, 1997
Updated: Nov 20, 2024
CWE ID 120
Summary
CVE-1999-0038 is a significant buffer overflow vulnerability affecting the xlock program. This issue enables local users to execute commands with root privileges by exploiting a buffer overflow flaw in the software. An attacker can manipulate input data to overwrite memory beyond the intended buffer, resulting in unintended code execution and potential system compromise. This vulnerability poses a serious threat to systems running the affected version of xlock and underscores the importance of keeping software up-to-date with security patches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SGI IRAX
- HP-UX family of operating systems
- SunOS
- Debian
- IBM AIX
Affected Vendors
- Debian
- IBM Corporation
- Oracle Corp
- Saskatchewan Government Insurance
- HP