Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0051Flexlm vulnerability

6 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 52.09%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedJan 6
Latest updateApr 30

Description

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages5 packages

NVDsgi/irix31 versions+30
NVDglobetrotter/flexlm4.0, 4.1, 5.0+2
NVDsun/sunos9 versions+8
NVDsun/solaris2.4, 2.5, 2.5.1+2
NVDsgi/license_oeo3.0, 3.1, 3.1.1+2

🔴Vulnerability Details

2
GHSA
GHSA-68w9-8p8f-9gr8: Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 42022-04-30
CVEList
CVE-1999-0051: Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 41999-09-29

💥Exploits & PoCs

3
Exploit-DB
Solaris 2.5.1 - License Manager1998-10-21
Exploit-DB
SGI IRIX 6.4 / SGI license_oeo 3.0/3.1/3.1.1 LicenseManager - 'LICENSEMGR_FILE_ROOT' Local Privilege Escalation1996-11-22
Exploit-DB
SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation1996-04-05
CVE-1999-0051 — Globetrotter Flexlm vulnerability | cvebase