CVE-1999-0405: Buffer Overflow
A buffer overflow in lsof allows local users to obtain root privilege.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
lsoffrom your environment.Uninstall lsof from affected systems if it is not required to remove the vulnerable binary and prevent local privilege escalation.
- Compensating control
Until a fixed lsof package is available from your vendor, restrict local access to the lsof binary to trusted administrators (for example, remove execute permission for unprivileged users or apply filesystem ACLs) to mitigate local users obtaining root.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0405?
CVE-1999-0405 has a high severity rating as it allows local users to gain root privileges through a buffer overflow vulnerability.
How do I fix CVE-1999-0405?
To fix CVE-1999-0405, users should update the lsof utility to the latest patched version that addresses this buffer overflow vulnerability.
Which systems are affected by CVE-1999-0405?
CVE-1999-0405 affects multiple Debian and FreeBSD systems, as well as SUSE and Red Hat Linux versions from 5.2 to 6.1.
Can CVE-1999-0405 be exploited remotely?
No, CVE-1999-0405 can only be exploited locally by a user with access to the vulnerable system.
Is there a workaround for CVE-1999-0405?
As a workaround for CVE-1999-0405, restricting access to the lsof utility for unprivileged users can mitigate the risk until a patch is applied.