CVE-1999-0065: Buffer Overflow
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
dtmailfrom your environment.Uninstall or remove the dtmail component from affected Oracle Solaris / SunOS systems if it is not required.
- Configuration
Disable dtmail's automatic handling of email attachments (or disable the dtmail service entirely) to prevent triggering the buffer overflow in attachment processing.
dtmail handle_attachments = disabled - Compensating control
Restrict network access to systems running dtmail using firewall rules or ACLs (limit to trusted management hosts), and isolate affected hosts from untrusted networks until an official vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0065?
CVE-1999-0065 has been classified as having a high severity due to the potential for remote command execution.
How do I fix CVE-1999-0065?
To fix CVE-1999-0065, users should update their dtmail software to a version that has addressed the buffer overflow vulnerabilities.
What systems are affected by CVE-1999-0065?
CVE-1999-0065 affects various versions of Sun Solaris and SunOS, including 2.4, 2.5, 2.5.1, 2.6, and specific SunOS versions.
Can CVE-1999-0065 be exploited remotely?
Yes, CVE-1999-0065 can be exploited remotely, allowing attackers to execute commands on vulnerable systems.
What are the risks associated with CVE-1999-0065?
The risks associated with CVE-1999-0065 include unauthorized access, data breaches, and complete system compromise.