What’s Vulnerable › Vulnerabilities

CVE-1999-0038

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1997-04-26 · updated 2026-06-16
• Weakness: CWE-120

Description

Buffer overflow in xlock program allows local users to execute commands as root.

Affected products

• Bsdi Bsd Os: 2.1
• Data General Dg Ux: 1.0, 2.0, 3.0, 4.0, 5.0, 6.0 (+1)
• Debian Linux: 0.93, 1.1, 1.2, 1.3
• Hewlett Packard Enterprise (HPE) HP-UX: 10.00, 10.01, 10.08, 10.10, 10.16, 10.20 (+3)
• IBM AIX: 3.2, 4.1, 4.2
• Sgi Irix: 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 (+5)
• Sun Solaris: 2.4, 2.5, 2.5.1
• Sunos: 5.3, 5.4, 5.5, 5.5.1

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038

Get alerted when CVE-1999-0038 or the next vulnerability affects your stack