CVE-1999-0704: Buffer Overflow
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
am-utils (Berkeley automounter daemon 'amd')from your environment.Uninstall the am-utils package or remove the amd daemon from affected systems if the automounter is not required.
- Configuration
Disable the amd logging facility (or reduce/stop logging) to avoid invoking the vulnerable logging code path until a vendor patch is available.
Berkeley automounter daemon (amd) / am-utils logging facility = disabled - Compensating control
Stop/disable the amd service and/or restrict access to hosts running amd using host-based firewalls or network ACLs to limit exposure until an upstream fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0704?
CVE-1999-0704 is classified as a high severity vulnerability due to its potential for buffer overflow exploitation.
How do I fix CVE-1999-0704?
To fix CVE-1999-0704, upgrade the affected am-utils package to a version that has patched the buffer overflow vulnerability.
What systems are affected by CVE-1999-0704?
CVE-1999-0704 affects multiple versions of BSDI BSD OS, FreeBSD, and various releases of Red Hat Linux.
What type of vulnerability is CVE-1999-0704?
CVE-1999-0704 is categorized as a buffer overflow vulnerability in the Berkeley automounter daemon.
Are there any known exploits for CVE-1999-0704?
Yes, there are known exploits for CVE-1999-0704 that leverage the buffer overflow to potentially execute arbitrary code.