What’s Vulnerable › Vulnerabilities

CVE-1999-0046

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 51.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1997-02-06 · updated 2026-06-16
• Weakness: CWE-120

Description

Buffer overflow of rlogin program using TERM environmental variable.

Affected products

• Bsdi Bsd Os: 1.1, 2.0, 2.0.1, 2.1
• Debian Linux: 0.93
• Digital Ultrix: all versions
• FreeBSD: 1.1.5.1, 2.0, 2.0.5, 2.1.0, 2.1.5
• Hewlett Packard Enterprise (HPE) HP-UX: 10.00, 10.01, 10.08, 10.09, 10.10, 10.16 (+4)
• IBM AIX: 3.2, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4 (+1)
• Netbsd: 1.0, 1.1
• Nextstep: all versions
• Oracle Corporation Solaris Operating System: 2.5.1, 2.6, 7.0, 8
• Sunos: 4.1.3u1, 4.1.4, 5.3, 5.4, 5.5, 5.5.1

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046

Get alerted when CVE-1999-0046 or the next vulnerability affects your stack