CVE-1999-0767: Buffer Overflow
Buffer overflow in Solaris libc, ufsrestore, and rcp via LCMESSAGES environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rcpfrom your environment.Uninstall or disable the rcp utility if it is not required to eliminate exposure to the vulnerability.
- Remove
Remove
ufsrestorefrom your environment.Uninstall or disable ufsrestore if it is not required, or restrict its availability to trusted administrators.
- Configuration
Unset the LC_MESSAGES environment variable for services and when invoking libc-linked programs (including ufsrestore and rcp) to prevent exploitation via a specially crafted LC_MESSAGES value.
Environment (LC_MESSAGES) LC_MESSAGES = unset - Compensating control
Restrict access and execution of affected binaries (libc-linked programs, ufsrestore, rcp) to trusted administrators via file permissions, sudoers rules, or network controls to reduce the attack surface.
- Operational
Monitor Oracle/Sun security advisories for a vendor-provided patch or fix for the libc LC_MESSAGES buffer overflow and apply the update when it becomes available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0767?
CVE-1999-0767 has been rated as a critical vulnerability due to its potential for allowing arbitrary code execution.
How do I fix CVE-1999-0767?
To fix CVE-1999-0767, you should apply the latest patches for Solaris and SunOS that address this buffer overflow vulnerability.
Which systems are affected by CVE-1999-0767?
CVE-1999-0767 affects Solaris 2.6, Solaris 7.0, and various versions of SunOS.
What type of vulnerability is CVE-1999-0767?
CVE-1999-0767 is a buffer overflow vulnerability that can be exploited through the LC_MESSAGES environmental variable.
Can CVE-1999-0767 be exploited remotely?
Yes, CVE-1999-0767 can potentially be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.