CVSS: 8.4EPSS: 0%CPEs: 45EXPL: 2CVE-1999-0038 – BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root. • https://www.exploit-db.com/exploits/19173 https://www.exploit-db.com/exploits/19172 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.2EPSS: 0%CPEs: 9EXPL: 1CVE-1999-0315 – Solaris 2.4 - '/bin/fdformat' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0315
Buffer overflow in Solaris fdformat command gives root access to local users. • https://www.exploit-db.com/exploits/328 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138 •
CVSS: 10.0EPSS: 2%CPEs: 20EXPL: 0CVE-1999-0165
https://notcve.org/view.php?id=CVE-1999-0165
NFS cache poisoning. • https://www.cve.org/CVERecord?id=CVE-1999-0165 •
CVSS: 10.0EPSS: 0%CPEs: 42EXPL: 1CVE-1999-0046 – BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0046
Buffer overflow of rlogin program using TERM environmental variable. • https://www.exploit-db.com/exploits/19203 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.2EPSS: 0%CPEs: 15EXPL: 1CVE-1999-0369 – Sun Solaris 7.0 - '/usr/dt/bin/sdtcm_convert' Local Overflow / Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0369
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access. • https://www.exploit-db.com/exploits/19128 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183 •