high7.2Public exploit code
CVE-1999-0040
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (3)1997-08-25 · local · unix · Verified
- BSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (2)1997-08-25 · local · unix · Verified
- BSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (1)1997-08-25 · local · unix · Verified
- LibXt - 'XtAppInitialize()' Local Overflow *xterm1997-05-14 · local · linux · Verified
- Xt Library - Local Privilege Escalation1996-08-24 · local · linux · Verified
Impact
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | Versions 4.0, 5.0, 5.3, 6.0, 6.1, 6.2 |
| Bsdi | Bsd Os | Versions 2.0, 2.0.1, 2.1 |
| Freebsd | Freebsd | Versions 1.1.5.1, 2.0 |
| Hp | Hp-Ux | Versions 9.00, 9.01, 9.10, 10.00, 10.01, 10.08 |
| Ibm | Aix | Versions 3.2, 4.1, 4.2 |
| Nec | Asl Ux 4800 | Version 64 |
| Nec | Ews-Ux V | Versions 4.2, 4.2mp |
| Nec | Up-Ux V | Version 4.2mp |
| Sun | Solaris | Versions 2.4, 2.5, 2.5.1 |
| Sun | Sunos | Versions 4.1.3, 4.1.3u1, 4.1.4, 5.3, 5.4, 5.5 |