CVE-1999-0367: Low severity netbsd netbsd vulnerability
NetBSD netstat command allows local users to access kernel memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NetBSD netstatfrom your environment.If netstat is not required, remove or uninstall the netstat binary from affected systems to prevent local users from using it to access kernel memory until a patch is provided.
- Compensating control
Restrict local access to the netstat utility on NetBSD systems to trusted administrative users until an official fix is available (for example, limit execution via filesystem permissions or ACLs, require use through sudo, or otherwise prevent untrusted local accounts from running netstat).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0367?
CVE-1999-0367 is considered a critical vulnerability as it allows local users to access sensitive kernel memory.
How do I fix CVE-1999-0367?
To fix CVE-1999-0367, you should upgrade to a patched version of NetBSD that has mitigated this vulnerability.
What systems are affected by CVE-1999-0367?
CVE-1999-0367 specifically affects NetBSD version 2.0.4.
What impact does CVE-1999-0367 have on security?
The impact of CVE-1999-0367 is that it can allow local users to read sensitive information from kernel memory, compromising system security.
Is CVE-1999-0367 a local or remote vulnerability?
CVE-1999-0367 is a local vulnerability that requires authenticated local access to exploit.