What’s Vulnerable › Vulnerabilities

CVE-1999-0022

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1996-07-03 · updated 2026-06-16
Weakness: CWE-125

Description

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Affected products

Bsdi Bsd Os: 1.1
FreeBSD: 2.0, 2.0.5, 2.1.0
Hewlett Packard Enterprise (HPE) HP-UX: 10.00
IBM AIX: 3.1, 3.2, 3.2.4, 3.2.5, 4.1, 4.1.1 (+5)
Sgi Irix: 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 (+6)
Sun Solaris: 4.1.3
Sunos: 4.1.1, 4.1.2, 4.1.3u1, 5.0, 5.1, 5.2 (+2)

References

Get alerted when CVE-1999-0022 or the next vulnerability affects your stack