Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0192

6 documents5 sources
Severity
10.0CRITICAL
EPSS
6.7%
top 8.78%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Redhat LinuxSlackware Slackware Linux
Timeline
PublishedOct 18
Latest updateApr 30

Description

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDredhat/linux7 versions+6
▶NVDslackware/slackware_linux7 versions+6

🔴Vulnerability Details

3
GHSA
GHSA-cvh8-jv99-rgjm: Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable↗2022-04-30
▶
CVEList
CVE-1999-0192: Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable↗1999-09-29
▶
VulnCheck
Red Hat linux Out-of-bounds Write↗1999
▶

💥Exploits & PoCs

2
Exploit-DB
RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (2)↗1999-08-18
▶
Exploit-DB
RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (1)↗1999-08-18
▶
CVE-1999-0192 (CRITICAL CVSS 10) | Buffer overflow in telnet daemon tg | cvebase.io