CVE-1999-0003: Buffer Overflow
Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Tooltalk (rpc.ttdbserverd)from your environment.Uninstall or remove the Tooltalk database server (rpc.ttdbserverd) from systems where it is not required.
- Configuration
Stop the rpc.ttdbserverd daemon and disable it from starting on boot (prevent the Tooltalk database server from running) on affected hosts.
Tooltalk (rpc.ttdbserverd) service_enabled = false - Compensating control
Restrict network access to the Tooltalk RPC service (rpc.ttdbserverd) via perimeter and host-based firewalls or ACLs; allow only trusted management hosts and block untrusted networks.
- Operational
If compromise is suspected, isolate affected systems, perform forensic investigation, assume possible root compromise, rotate any potentially exposed credentials, and restore systems from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0003?
CVE-1999-0003 is classified as a high severity vulnerability due to the ability to execute commands as root.
How do I fix CVE-1999-0003?
To fix CVE-1999-0003, update the Tooltalk database server to the latest version or apply available security patches.
Which systems are affected by CVE-1999-0003?
CVE-1999-0003 affects various versions of SGI IRIX, HPE HP-UX, IBM AIX, and Sun Solaris operating systems.
What type of vulnerability is CVE-1999-0003?
CVE-1999-0003 is a buffer overflow vulnerability that allows attackers to execute arbitrary commands.
What should I do if my system is vulnerable to CVE-1999-0003?
If your system is vulnerable to CVE-1999-0003, it's critical to immediately patch your tools or limit the use of the affected software.