| Vulnerability Name: | CCN-3142 | ||||||
| Published: | 1999-08-17 | ||||||
| Updated: | 1999-08-17 | ||||||
| Summary: | A vulnerability in Red Hat and Linux system's libtermcap tgetent function could allow a local attacker to overflow a buffer, allowing them to execute arbitrary code on the system with root privileges. This vulnerability can be exploited on systems that allow a user to specify their own termcap file. | ||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||
| CVSS v2 Severity: | 7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||
| Vulnerability Consequences: | Gain Privileges | ||||||
| References: | Source: CCN Type: Caldera International, Inc. Security Advisory CSSA-1999-020.0 buffer overflow in termcap library Source: CCN Type: RHSA-1999:028-01 Buffer overflow in libtermcap tgetent() Source: DEBIAN Type: Debian Security Advisory 19990823a termcap-compat: Buffer overflow Source: CCN Type: SuSE Security Announcement #11 termcap-2.0.8-x Source: XF Type: UNKNOWN linux-termcap-tgetent(3142) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||