ID CVE-1999-0693
Summary Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
References
Vulnerable Configurations
  • cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*
  • cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*
    cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*
  • cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*
    cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 03-05-2018 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
oval via4
accepted 2005-03-09T07:56:00.000-04:00
class vulnerability
contributors
name Brian Soby
organization The MITRE Corporation
description Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
family unix
id oval:org.mitre.oval:def:4374
status accepted
submitted 2005-02-01T12:00:00.000-04:00
title ToolTalk Buffer Overflow via TT_SESSION Envvar
version 34
refmap via4
bid 641
cert CA-99-11
hp HPSBUX9909-103
sun 00192
xf cde-dtsession-env-bo
Last major update 03-05-2018 - 01:29
Published 02-03-2000 - 05:00
Last modified 03-05-2018 - 01:29
Back to Top