CVE-1999-0090: Buffer Overflow

Published Oct 1, 1997

Updated

Buffer overflow in AIX rcp command allows local users to obtain root access.

Affected Software

6 affected components

IBM AIX=4.1

IBM AIX=4.1.1

IBM AIX=4.1.3

IBM AIX=4.1.4

IBM AIX=4.1.5

IBM AIX=4.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove IBM AIX rcp from your environment.
Disable or uninstall the rcp command on affected AIX systems until a vendor-supplied patch/fix is available.

Event History

Oct 1, 1997

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Sep 29, 1999

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0090?

CVE-1999-0090 is considered a critical severity vulnerability due to its ability to allow local users to gain root access.

How do I fix CVE-1999-0090?

To resolve CVE-1999-0090, apply the latest patches provided by IBM for the affected AIX versions.

Which AIX versions are affected by CVE-1999-0090?

CVE-1999-0090 affects AIX versions 4.1, 4.1.1, 4.1.3, 4.1.4, 4.1.5, and 4.2.

What is the nature of the vulnerability in CVE-1999-0090?

The vulnerability in CVE-1999-0090 is a buffer overflow in the AIX rcp command.

Can CVE-1999-0090 be exploited remotely?

No, CVE-1999-0090 requires local user access to exploit the buffer overflow and gain root privileges.