First published: Mon Jan 27 1997(Updated: )
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Debian Netkit | =0.07 | |
IBM AIX | =3.1 | |
IBM AIX | =4.1 | |
IBM AIX | =4.2 | |
NEC ASL UX 4800 | ||
NEC EWS-UX V | ||
NEC UP-UX V |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0048 is considered to have a high severity due to its potential to execute arbitrary commands with root privileges.
To fix CVE-1999-0048, it is recommended to update the Talk daemon and correct any corrupt DNS information.
CVE-1999-0048 affects several versions of Netkit and IBM AIX, as well as NEC ASL UX 4800, NEC EWS-UX V, and NEC UP-UX V.
The implications of CVE-1999-0048 include the risk of unauthorized command execution on affected systems.
While CVE-1999-0048 is an older vulnerability, it remains relevant for systems still running the affected software versions.