CVE-1999-0724: Buffer Overflow
Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir() function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Unmount procfs if currently mounted and prevent it from being mounted at boot (remove from fstab or equivalent) until a vendor fix is available.
OpenBSD procfs filesystem mounted = false - Configuration
Unmount fdescfs if currently mounted and prevent it from being mounted at boot (remove from fstab or equivalent) until a vendor fix is available.
OpenBSD fdescfs filesystem mounted = false - Compensating control
Isolate affected OpenBSD hosts from untrusted networks and restrict administrative access to trusted operators only (network segmentation, ACLs, or jump hosts) until a patch is available.
- Operational
Monitor OpenBSD vendor advisories for a patch addressing the buffer overflow in procfs and fdescfs (uio_offset in readdir()). Apply the vendor-supplied fix as soon as it is released.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0724?
CVE-1999-0724 is considered a critical vulnerability due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-1999-0724?
To fix CVE-1999-0724, upgrade to a patched version of OpenBSD, specifically versions later than 2.5.
What systems are affected by CVE-1999-0724?
CVE-1999-0724 specifically affects OpenBSD version 2.5 that uses procfs and fdescfs file systems.
What are the implications of CVE-1999-0724?
The implications of CVE-1999-0724 include unauthorized access and potential complete system compromise.
How was CVE-1999-0724 exploited?
CVE-1999-0724 was exploited through a buffer overflow vulnerability in the readdir() function, allowing attackers to overwrite memory.