CVE-1999-0409: Buffer Overflow
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
gnuplotfrom your environment.Uninstall the gnuplot package from affected SUSE Linux systems or remove the gnuplot binary to eliminate the vulnerable component.
- Compensating control
Restrict local user access to affected systems: disable or remove untrusted local accounts, restrict interactive logins, and limit who can execute local binaries to reduce the risk of local exploitation.
- Operational
Assume possible root compromise if the vulnerable gnuplot (Linux version 3.5) was present and may have been executed; audit systems for signs of compromise, rotate credentials and keys used on the system, and rebuild or restore from known-good backups if compromise is confirmed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0409?
CVE-1999-0409 is considered a high severity vulnerability due to its potential to allow local users to gain root access.
How do I fix CVE-1999-0409?
To fix CVE-1999-0409, you should upgrade gnuplot to the latest version available for your SUSE Linux distribution.
Who is affected by CVE-1999-0409?
Users of SUSE Linux versions 3.5 and 5.2 that have gnuplot installed are affected by CVE-1999-0409.
What is the nature of the vulnerability in CVE-1999-0409?
CVE-1999-0409 involves a buffer overflow in gnuplot that can be exploited to obtain elevated privileges.
Is there a workaround for CVE-1999-0409?
There are no specific workarounds for CVE-1999-0409, so applying the patch or upgrading is recommended.