CVE-1999-0048: Critical severity Debian netkit vulnerability
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
talkdfrom your environment.Uninstall or disable the talkd daemon until a vendor security patch is available.
- Compensating control
Restrict network access to the talkd service (block incoming connections at the firewall or allow only trusted hosts) and limit exposure to untrusted or corrupted DNS responses until a fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0048?
CVE-1999-0048 is considered to have a high severity due to its potential to execute arbitrary commands with root privileges.
How do I fix CVE-1999-0048?
To fix CVE-1999-0048, it is recommended to update the Talk daemon and correct any corrupt DNS information.
Which software is affected by CVE-1999-0048?
CVE-1999-0048 affects several versions of Netkit and IBM AIX, as well as NEC ASL UX 4800, NEC EWS-UX V, and NEC UP-UX V.
What are the implications of CVE-1999-0048?
The implications of CVE-1999-0048 include the risk of unauthorized command execution on affected systems.
Is CVE-1999-0048 still relevant today?
While CVE-1999-0048 is an older vulnerability, it remains relevant for systems still running the affected software versions.