Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-1588 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Solaris

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

9.8CRITICALNVD

EPSS

18.2%

top 4.80%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Solaris

Timeline

PublishedDec 31

Latest updateApr 30

Description

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDsun/solaris2.4, 2.5, 2.5.1+2

🔴Vulnerability Details

GHSA

GHSA-wh9q-9hjg-qw4c: Buffer overflow in nlps_server in Sun Solaris x86 2↗2022-04-30

▶

CVEList

CVE-1999-1588: Buffer overflow in nlps_server in Sun Solaris x86 2↗2006-04-21

▶

💥Exploits & PoCs

Exploit-DB

Solaris x86 2.4/2.5 - nlps_server Buffer Overflow↗1998-04-01

▶