CVE-1999-0101
CVSS 2.0 Score 10 of 10 (high)
Details
Summary
CVE-1999-0101 is a significant buffer overflow vulnerability affecting the "gethostbyname" library calls in AIX and Solaris operating systems. By exploiting this issue, an attacker can corrupt DNS host names and gain unauthorized root access to the affected system. This vulnerability poses a serious risk to network security and requires immediate patching. The buffer overflow occurs due to improper validation of user input in the "gethostbyname" function, allowing malicious input to exceed the intended buffer size and overwrite adjacent memory locations. The attacker can then execute arbitrary code in the privileged context of the affected system, leading to full compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- IBM AIX
Affected Vendors
- IBM Corporation