CVE-1999-0101: Buffer Overflow
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict DNS resolution to trusted DNS servers and block untrusted DNS responses. Configure network firewalls/ACLs to allow DNS (UDP/TCP 53) only to approved DNS servers; on-host firewalls should likewise restrict DNS traffic to known servers. Consider isolating affected AIX/Solaris hosts from untrusted networks until a vendor fix is applied.
- Operational
Monitor vendor and security advisories for a supplied patch or update addressing the gethostbyname buffer overflow and apply the vendor-supplied update as soon as it is available.
- Operational
Audit AIX/Solaris systems for signs of compromise (unexpected root access, modified suid binaries, unusual processes or network activity). If compromise is suspected, rotate or replace exposed credentials and rebuild or restore affected systems from trusted backups/images.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0101?
CVE-1999-0101 is classified as a critical vulnerability due to the potential for root access through a buffer overflow.
How do I fix CVE-1999-0101?
To address CVE-1999-0101, apply the relevant patches or updates provided by IBM for affected AIX versions.
Which versions of AIX are affected by CVE-1999-0101?
CVE-1999-0101 affects AIX versions 3.2, 4.1, and 4.2.
What systems are at risk from CVE-1999-0101?
Systems running AIX versions 3.2, 4.1, and 4.2 are at risk due to the vulnerability in the gethostbyname library.
What is the impact of exploiting CVE-1999-0101?
Exploiting CVE-1999-0101 can allow an attacker to gain root access, potentially compromising the entire system.