high8.4Public exploit code
CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation (2)1997-04-26 · local · unix · Verified
- BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - 'xlock' Local Overflow / Local Privilege Escalation (1)1997-04-26 · local · unix · Verified
Impact
Buffer overflow in xlock program allows local users to execute commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Data General | Dg Ux | Versions 1.0, 2.0, 3.0, 4.0, 5.0, 6.0 |
| Sgi | Irix | Versions 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 |
| Bsdi | Bsd Os | Version 2.1 |
| Debian | Debian Linux | Versions 0.93, 1.1, 1.2, 1.3 |
| Hp | Hp-Ux | Versions 10.00, 10.01, 10.08, 10.10, 10.16, 10.20 |
| Ibm | Aix | Versions 3.2, 4.1, 4.2 |
| Sun | Solaris | Versions 2.4, 2.5, 2.5.1 |
| Sun | Sunos | Versions 5.3, 5.4, 5.5, 5.5.1 |