Unscored severity · published Jan 27, 1997
CVE-1999-0048
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges
–
CVSS
3.1%
EPSS
No
On KEV
Description
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
3.1; 4.1; 4.2 · source: NVD
AU
Asl UX 4800 · Nec
All versions, or not specified · source: NVD
EV
Ews-ux V · Nec
All versions, or not specified · source: NVD
NE
Netkit · Debian
0.07 · source: NVD
UV
Up-ux V · Nec
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0048
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0048
sunsolve.sun.com
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147
More from Netkit
–
CVE-2004-0911
telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a…