CVE-1999-1158 – Solaris 2.4 passwd / yppasswd / nispasswd - Local Overflow
https://notcve.org/view.php?id=CVE-1999-1158
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd. • https://www.exploit-db.com/exploits/341 https://www.exploit-db.com/exploits/19158 ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba •
CVE-1999-0040 – LibXt - 'XtAppInitialize()' Local Overflow *xterm
https://notcve.org/view.php?id=CVE-1999-0040
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. • https://www.exploit-db.com/exploits/331 https://www.exploit-db.com/exploits/322 https://www.exploit-db.com/exploits/19200 https://www.exploit-db.com/exploits/19201 https://www.exploit-db.com/exploits/19202 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040 •
CVE-1999-0038 – BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root. • https://www.exploit-db.com/exploits/19173 https://www.exploit-db.com/exploits/19172 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-1999-0315 – Solaris 2.4 - '/bin/fdformat' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0315
Buffer overflow in Solaris fdformat command gives root access to local users. • https://www.exploit-db.com/exploits/328 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138 •
CVE-1999-0165
https://notcve.org/view.php?id=CVE-1999-0165
NFS cache poisoning. • https://www.cve.org/CVERecord?id=CVE-1999-0165 •