CVE-1999-0696: Buffer Overflow
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
CDE Calendar Manager Service Daemon (rpc.cmsd)from your environment.If the CDE Calendar Manager Service Daemon (rpc.cmsd) is not required, uninstall or remove it from affected systems (HPE HP-UX, Oracle Solaris/ZFS, SunOS).
- Configuration
Stop the rpc.cmsd process and disable it from starting on boot (e.g., remove or disable relevant inetd/xinetd/service entries) on all affected systems until a vendor fix is available.
rpc.cmsd (CDE Calendar Manager Service Daemon) enabled = false - Compensating control
Restrict network access to hosts running rpc.cmsd by applying firewall rules or ACLs to block incoming connections to the service and isolate affected systems from untrusted networks until remediation is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0696?
CVE-1999-0696 is considered a critical vulnerability due to its potential for remote code execution.
Which systems are affected by CVE-1999-0696?
CVE-1999-0696 affects various versions of HP-UX and SunOS operating systems.
How can I mitigate CVE-1999-0696?
To mitigate CVE-1999-0696, patch the affected systems to the latest versions provided by the vendor.
What is a buffer overflow in the context of CVE-1999-0696?
In the context of CVE-1999-0696, a buffer overflow occurs when the CDE Calendar Manager Service Daemon improperly handles input data, leading to memory corruption.
Are there any workarounds for CVE-1999-0696?
Temporary workarounds for CVE-1999-0696 include disabling the CDE Calendar Manager Service Daemon if it is not needed.