high7.2Public exploit code
CVE-1999-0023
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Buffer Overrun1996-07-03 · local · linux · Verified
Impact
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inet | Inet | Versions 5.01, 6.01 |
| Bsdi | Bsd Os | All versions |
| Freebsd | Freebsd | Versions 2.0, 2.0.5, 2.1.0, 2.2 |
| Ibm | Aix | Versions 3.2, 4.1, 4.2 |
| Sco | Internet Faststart | Version 1.0 |
| Sco | Open Desktop | Versions 2.0, 3.0 |
| Sco | Openserver | Versions 2.0, 5.0, 5.0.2 |
| Sco | Tcp Ip | Versions 1.2.0, 1.2.1 |
| Sco | Unixware | Versions 2.0, 2.1 |
| Sun | Sunos | All versions Versions 4.1.3, 4.1.3u1, 4.1.4, 5.3, 5.4 |