CVE-1999-0948: Buffer Overflow
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
uum (Canna input system)from your environment.Uninstall or disable the 'uum' program (Canna input system) on affected systems until a vendor-supplied fix is available, to prevent local users from exploiting the buffer overflow to gain root privileges.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0948?
CVE-1999-0948 has a high severity rating due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-0948?
To fix CVE-1999-0948, update the affected systems to a version that does not have the buffer overflow vulnerability.
Which software is affected by CVE-1999-0948?
CVE-1999-0948 affects multiple versions of SGI IRIX, Sun Solaris, and Turbolinux.
Can CVE-1999-0948 be exploited remotely?
No, CVE-1999-0948 is a local vulnerability and requires local access for exploitation.
What systems are particularly at risk from CVE-1999-0948?
Systems running SGI IRIX versions 5.3 through 6.5 and certain Solaris versions are particularly at risk from CVE-1999-0948.