CVE-1999-0023

Description

Local user gains root privileges via buffer overflow in rdist, via lookup() function.

Affected products

• bsdi / bsd_os
• FreeBSD / FreeBSD2.1.0 – 2.1.0
• FreeBSD / FreeBSD2.2 – 2.2
• FreeBSD / FreeBSD2.0 – 2.0
• FreeBSD / FreeBSD2.0.5 – 2.0.5
• ibm / aix3.2 – 3.2
• ibm / aix4.2 – 4.2
• ibm / aix4.1 – 4.1
• iNET / inet6.01 – 6.01
• iNET / inet5.01 – 5.01
• sco / internet_faststart1.0 – 1.0
• sco / open_desktop2.0 – 2.0
• sco / open_desktop3.0 – 3.0
• sco / openserver5.0 – 5.0
• sco / openserver2.0 – 2.0
• sco / openserver5.0.2 – 5.0.2
• sco / tcp_ip1.2.0 – 1.2.0
• sco / tcp_ip1.2.1 – 1.2.1
• sco / unixware2.0 – 2.0
• sco / unixware2.1 – 2.1
• sun / sunos
• sun / sunos4.1.3 – 4.1.3
• sun / sunos4.1.3u1 – 4.1.3u1
• sun / sunos4.1.4 – 4.1.4
• sun / sunos5.3 – 5.3
• sun / sunos5.4 – 5.4
• sun / sunos5.5 – 5.5
• sun / sunos5.5.1 – 5.5.1

Exploits & proofs of concept

• exploit-dbBSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Buffer Overrunby Jeff Uphoff

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023