CVE-1999-0340: Buffer Overflow
Buffer overflow in Linux Slackware crond program allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
slackware/crondfrom your environment.If cron functionality is not required, uninstall the Slackware crond package from affected systems until a vendor-supplied fix is provided.
- Configuration
Stop the crond daemon and disable it from starting automatically on affected systems until an official Slackware patch/fix is available.
crond (Slackware) service_enabled = false - Compensating control
Restrict and review local user accounts and privileges (remove unnecessary local accounts, limit who can log in locally) to reduce the number of users who could exploit the vulnerability.
- Operational
Audit systems for evidence of local privilege escalation (check logs, root-owned new accounts, altered binaries). If compromise is suspected, treat systems as potentially compromised, perform incident response, and rotate any credentials or keys that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0340?
CVE-1999-0340 is considered critical due to the potential for local users to gain root access.
How do I fix CVE-1999-0340?
To fix CVE-1999-0340, update the crond program to a version that is not affected by the buffer overflow vulnerability.
Who is affected by CVE-1999-0340?
CVE-1999-0340 affects users running Linux Slackware version 3.4.
What type of vulnerability is CVE-1999-0340?
CVE-1999-0340 is a buffer overflow vulnerability.
Can CVE-1999-0340 be exploited remotely?
CVE-1999-0340 cannot be exploited remotely as it requires local access to the system.