high7.2Public exploit code
CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NetBSD 1.4 / OpenBSD 2.5 / Solaris 7.0 - 'profil(2)' Modify The Internal Data Space1999-08-09 · local · multiple · Verified
Impact
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netbsd | Netbsd | Versions 1.0, 1.1, 1.2, 1.2.1, 1.3, 1.3.1 |
| Openbsd | Openbsd | Versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 |
| Sun | Solaris | Versions 2.4, 2.5, 2.6, 7.0 |
| Sun | Sunos | All versions Versions 5.1, 5.2, 5.3, 5.4, 5.5 |