CVE-1999-0192

Description

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.

Affected products

• RedHat / linux4.0 – 4.0
• RedHat / linux4.1 – 4.1
• RedHat / linux4.2 – 4.2
• RedHat / linux5.0 – 5.0
• RedHat / linux5.1 – 5.1
• RedHat / linux5.2 – 5.2
• RedHat / linux6.0 – 6.0
• slackware / slackware_linux3.2 – 3.2
• slackware / slackware_linux3.3 – 3.3
• slackware / slackware_linux3.4 – 3.4
• slackware / slackware_linux3.5 – 3.5
• slackware / slackware_linux3.6 – 3.6
• slackware / slackware_linux3.9 – 3.9
• slackware / slackware_linux4.0 – 4.0

Exploits & proofs of concept

• exploit-dbRedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (2)by sk8
• exploit-dbRedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (1)by m0f0

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192