CVE-1999-0405

A buffer overflow in lsof allows local users to obtain root privilege.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.osvdb.org/3163
http://www.osvdb.org/3163

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:debian:debian_linux:2.0:::::::*
	cpe:2.3:o:debian:debian_linux:2.0.5:::::::*
	cpe:2.3:o:freebsd:freebsd:2.0:::::::*
	cpe:2.3:o:freebsd:freebsd:2.0.5:::::::*
	cpe:2.3:o:freebsd:freebsd:2.1.0:::::::*
	cpe:2.3:o:freebsd:freebsd:2.1.5:::::::*
	cpe:2.3:o:freebsd:freebsd:2.1.6:::::::*
	cpe:2.3:o:freebsd:freebsd:2.1.7.1:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.2:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.3:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.4:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.5:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.6:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.8:::::::*
	cpe:2.3:o:freebsd:freebsd:3.0:::::::*
	cpe:2.3:o:freebsd:freebsd:3.1:::::::*
	cpe:2.3:o:freebsd:freebsd:3.2:::::::*
	cpe:2.3:o:redhat:linux:5.2::i386:::::
	cpe:2.3:o:suse:suse_linux:4.2:::::::*
	cpe:2.3:o:suse:suse_linux:4.3:::::::*
	cpe:2.3:o:suse:suse_linux:4.4:::::::*
	cpe:2.3:o:suse:suse_linux:4.4.1:::::::*
	cpe:2.3:o:suse:suse_linux:5.0:::::::*
	cpe:2.3:o:suse:suse_linux:5.1:::::::*
	cpe:2.3:o:suse:suse_linux:5.2:::::::*
	cpe:2.3:o:suse:suse_linux:5.3:::::::*
	cpe:2.3:o:suse:suse_linux:6.0:::::::*
	cpe:2.3:o:suse:suse_linux:6.1:::::::*

History

20 Nov 2024, 23:28

Type	Values Removed	Values Added
References	~~() http://www.osvdb.org/3163 -~~	() http://www.osvdb.org/3163 -

Information

Published : 1999-02-18 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-1999-0405

Mitre link : CVE-1999-0405

CVE.ORG link : CVE-1999-0405

JSON object : View

Products Affected

redhat

linux

freebsd

freebsd

debian

debian_linux

suse

suse_linux

CWE

NVD-CWE-Other

{"id": "CVE-1999-0405", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1999-02-18T05:00:00.000", "references": [{"url": "http://www.osvdb.org/3163", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/3163", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A buffer overflow in lsof allows local users to obtain root privilege."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}, {"criteria": "cpe:2.3:o:debian:debian_linux:2.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "224CAC5B-96B0-4015-8106-63B486F37053"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34797660-41F5-4358-B70F-2A40DE48F182"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27C9E23D-AB82-4AE1-873E-C5493BB96AA1"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4054D69F-596F-4EB4-BE9A-E2478343F55A"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA26ABBE-9973-45FA-9E9B-82170B751219"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF8F9B2F-E898-4F87-A245-32A41748587B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}, {"criteria": "cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"}, {"criteria": "cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"}, {"criteria": "cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7716120D-5110-42B0-A574-9AA2AC8D3C32"}, {"criteria": "cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"}, {"criteria": "cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CC7D746-B98B-4FAF-B816-57222759A344"}, {"criteria": "cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "830D48B8-D21D-4D31-99A1-20C231804DBE"}, {"criteria": "cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"}, {"criteria": "cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"}, {"criteria": "cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCC94EF9-5872-402F-B2FC-06331A924BB2"}, {"criteria": "cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F163E145-09F7-4BE2-9B46-5B6713070BAB"}, {"criteria": "cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "124E1802-7984-45ED-8A92-393FC20662FD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}