What’s Vulnerable › Vulnerabilities

CVE-1999-0048

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1997-01-27 · updated 2026-06-16

Description

Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

Affected products

• Debian Netkit: 0.07
• IBM AIX: 3.1, 4.1, 4.2
• NEC Asl Ux 4800: all versions
• NEC Ews-Ux V: all versions
• NEC Up-Ux V: all versions

References

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147

Get alerted when CVE-1999-0048 or the next vulnerability affects your stack