CVE-1999-0038

Published: Apr 26, 1997Modified: Apr 16, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Buffer overflow in xlock program allows local users to execute commands as root.

Affected (45)

Products: Data General: Dg Ux · Sgi: Irix · Bsdi: Bsd Os · +4 more

Show all products

Data General: Dg Ux · Sgi: Irix · Bsdi: Bsd Os · Debian: Debian Linux · Hp: Hp Ux · Ibm: Aix · Sun: Solaris, Sunos

1 product

1 product

1 product

1 product

1 product

1 product

2 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Data General Dg Ux	Version 1.0
Data General Dg Ux	Version 2.0
Data General Dg Ux	Version 3.0
Data General Dg Ux	Version 4.0
Data General Dg Ux	Version 5.0
Data General Dg Ux	Version 6.0
Data General Dg Ux	Version 7.0
Sgi Irix	Version 5.0.1
Sgi Irix	Version 5.0
Sgi Irix	Version 5.1.1
Sgi Irix	Version 5.1
Sgi Irix	Version 5.2
Sgi Irix	Version 5.3
Sgi Irix	Version 5.3
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0
Sgi Irix	Version 6.1
Sgi Irix	Version 6.3
Sgi Irix	Version 6.4

Configuration B

25 vulnerable

Vulnerable Software	Affected Versions
Bsdi Bsd Os	Version 2.1
Debian Debian Linux	Version 0.93
Debian Debian Linux	Version 1.1
Debian Debian Linux	Version 1.2
Debian Debian Linux	Version 1.3
Hp Hp Ux	Version 10.00
Hp Hp Ux	Version 10.01
Hp Hp Ux	Version 10.08
Hp Hp Ux	Version 10.10
Hp Hp Ux	Version 10.16
Hp Hp Ux	Version 10.20
Hp Hp Ux	Version 10.24
Hp Hp Ux	Version 10.30
Hp Hp Ux	Version 10.34
Ibm Aix	Version 3.2
Ibm Aix	Version 4.1
Ibm Aix	Version 4.2
Sun Solaris	Version 2.4
Sun Solaris	Version 2.5.1
Sun Solaris	Version 2.5.1
Sun Solaris	Version 2.5
Sun Sunos	Version 5.3
Sun Sunos	Version 5.4
Sun Sunos	Version 5.5.1
Sun Sunos	Version 5.5

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.