CVE-1999-0038

Buffer overflow in xlock program allows local users to execute commands as root.

CVSS v3 8.4 HIGH
CVSS v2.0 7.2 HIGH

8.4^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:data_general:dg_ux:1.0:::::::*
	cpe:2.3:a:data_general:dg_ux:2.0:::::::*
	cpe:2.3:a:data_general:dg_ux:3.0:::::::*
	cpe:2.3:a:data_general:dg_ux:4.0:::::::*
	cpe:2.3:a:data_general:dg_ux:5.0:::::::*
	cpe:2.3:a:data_general:dg_ux:6.0:::::::*
	cpe:2.3:a:data_general:dg_ux:7.0:::::::*
	cpe:2.3:o:sgi:irix:5.0:::::::*
	cpe:2.3:o:sgi:irix:5.0.1:::::::*
	cpe:2.3:o:sgi:irix:5.1:::::::*
	cpe:2.3:o:sgi:irix:5.1.1:::::::*
	cpe:2.3:o:sgi:irix:5.2:::::::*
	cpe:2.3:o:sgi:irix:5.3:::::::*
	cpe:2.3:o:sgi:irix:5.3::xfs:::::
	cpe:2.3:o:sgi:irix:6.0:::::::*
	cpe:2.3:o:sgi:irix:6.0.1:::::::*
	cpe:2.3:o:sgi:irix:6.0.1::xfs:::::
	cpe:2.3:o:sgi:irix:6.1:::::::*
	cpe:2.3:o:sgi:irix:6.3:::::::*
	cpe:2.3:o:sgi:irix:6.4:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:bsdi:bsd_os:2.1:::::::*
	cpe:2.3:o:debian:debian_linux:0.93:::::::*
	cpe:2.3:o:debian:debian_linux:1.1:::::::*
	cpe:2.3:o:debian:debian_linux:1.2:::::::*
	cpe:2.3:o:debian:debian_linux:1.3:::::::*
	cpe:2.3:o:hp:hp-ux:10.00:::::::*
	cpe:2.3:o:hp:hp-ux:10.01:::::::*
	cpe:2.3:o:hp:hp-ux:10.08:::::::*
	cpe:2.3:o:hp:hp-ux:10.10:::::::*
	cpe:2.3:o:hp:hp-ux:10.16:::::::*
	cpe:2.3:o:hp:hp-ux:10.20:::::::*
	cpe:2.3:o:hp:hp-ux:10.24:::::::*
	cpe:2.3:o:hp:hp-ux:10.30:::::::*
	cpe:2.3:o:hp:hp-ux:10.34:::::::*
	cpe:2.3:o:ibm:aix:3.2:::::::*
	cpe:2.3:o:ibm:aix:4.1:::::::*
	cpe:2.3:o:ibm:aix:4.2:::::::*
	cpe:2.3:o:sun:solaris:2.4::x86:::::
	cpe:2.3:o:sun:solaris:2.5::x86:::::
	cpe:2.3:o:sun:solaris:2.5.1::ppc:::::
	cpe:2.3:o:sun:solaris:2.5.1::x86:::::
	cpe:2.3:o:sun:sunos:5.3:::::::*
	cpe:2.3:o:sun:sunos:5.4:::::::*
	cpe:2.3:o:sun:sunos:5.5:::::::*
	cpe:2.3:o:sun:sunos:5.5.1:::::::*

History

20 Nov 2024, 23:27

Type	Values Removed	Values Added
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 -

12 Sep 2024, 15:35

Type	Values Removed	Values Added
CVSS	v2 : ~~7.2~~ v3 : ~~unknown~~	v2 : 7.2 v3 : 8.4
CWE		CWE-120

17 Aug 2022, 07:15

Type	Values Removed	Values Added
References		(MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 -

Information

Published : 1997-04-26 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-1999-0038

Mitre link : CVE-1999-0038

CVE.ORG link : CVE-1999-0038

JSON object : View

Products Affected

bsdi

bsd_os

sun

sunos
solaris

ibm

hp-ux

sgi

irix

debian

debian_linux

data_general

dg_ux

CWE

NVD-CWE-Other CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-1999-0038", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "published": "1997-04-26T04:00:00.000", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in xlock program allows local users to execute commands as root."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:data_general:dg_ux:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE3A815C-B264-4B1F-8243-894C21F8D1EA"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDB5057F-A306-4250-B247-701948713AD8"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7E43C99-DEC8-4519-90A9-ADBAA56B99C7"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEC4E336-7290-4FF2-BB71-A1ABDA3283D5"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B923A0FC-1F99-40F7-9788-5DF1A757ED27"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D9ECBD3-23BA-4832-B3F9-31D2080139CA"}, {"criteria": "cpe:2.3:a:data_general:dg_ux:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2A6CF60-2BDD-48C3-9A9A-DBBFD153B642"}, {"criteria": "cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"}, {"criteria": "cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"}, {"criteria": "cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "333103D5-71B8-4DC1-90F7-15F2841955D6"}, {"criteria": "cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A889C10-0637-4133-AFBD-533C8397BE89"}, {"criteria": "cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E292DA15-91BF-4957-9C0F-A69518538BED"}, {"criteria": "cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26144F94-63FD-4907-B548-09B68C2FC9B3"}, {"criteria": "cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92BF03B6-9CDC-4161-9C1C-3E73582C3D83"}, {"criteria": "cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26309EFA-0991-46B6-9818-F0FBB902D5F5"}, {"criteria": "cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"}, {"criteria": "cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"}, {"criteria": "cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "966C1A13-8007-408D-96BE-0DA3BB6CA401"}, {"criteria": "cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2D59247-56FA-46B4-BB51-2DAE71AFC145"}, {"criteria": "cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "766851E2-134A-4A89-931B-6F1753525684"}, {"criteria": "cpe:2.3:o:debian:debian_linux:0.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1E1BD95-EF97-4CA0-9EF1-5081DD5F782B"}, {"criteria": "cpe:2.3:o:debian:debian_linux:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9EDD1D3-6E5C-4D98-9360-33949353BD7A"}, {"criteria": "cpe:2.3:o:debian:debian_linux:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E89840-3B57-4CBA-BE90-0BBA61F21F96"}, {"criteria": "cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3187435B-C052-4DBA-AA79-F8AC0287EE14"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53BBFE9A-6846-4625-91AC-47AA0BC0933A"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2170549C-80D2-4FF8-AC07-BD4124125B02"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38BFA923-7D80-4F01-AF9F-6F13209948AC"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38E41C26-A086-4C9C-83D8-CB910F4B67F1"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4259A901-A1CF-44EE-80C4-2031D3FCADC3"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"}, {"criteria": "cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFD50216-90AC-480E-A11C-E88E64C6D84A"}, {"criteria": "cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD5E0678-45C7-492A-963C-897494D6878F"}, {"criteria": "cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBF25306-E7C2-4F9A-A809-4779A6C0A079"}, {"criteria": "cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}, {"criteria": "cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F881110-7B54-49DA-B23A-710273430C44"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "200D8CB2-0D52-40A8-9CD9-6E4513605201"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54AF87E4-52A4-44CA-B48E-A5BB139E6410"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F66BAF35-A8B9-4E95-B270-444206FDD35B"}, {"criteria": "cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7A22D21-E0A9-4B56-86C7-805AD1A610D6"}, {"criteria": "cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}, {"criteria": "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B72953B-E873-4E44-A3CF-12D770A0D416"}, {"criteria": "cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F847DB-65A9-47DA-BCFA-A179E5E2301A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

8.4 /10