Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0693

4 documents4 sources

Severity

7.2HIGH

EPSS

14.8%

top 5.48%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

HP Hp-ux IBM AIX SCO Unixware

Timeline

PublishedMar 2

Latest updateApr 30

Description

Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages3 packages

▶NVDibm/aix4

▶NVDhp/hp-ux10, 11+1

▶NVDsco/unixware7

🔴Vulnerability Details

GHSA

GHSA-wjxh-cxm3-22mj: Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges↗2022-04-30

▶

CVEList

CVE-1999-0693: Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges↗2000-01-04

▶

💥Exploits & PoCs

Exploit-DB

DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Local Buffer Overflow↗1999-09-13

▶