CVE-1999-1330

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1999-12-31 · updated 2026-06-16

Description

The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.

Affected products

Debian Linux: 4.0
RedHat Linux: 4.2

References

http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html
http://marc.info/?l=bugtraq&m=87602661419259&w=2
http://www.iss.net/security_center/static/7244.php
http://www.redhat.com/support/errata/rh42-errata-general.html#db
http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html
http://marc.info/?l=bugtraq&m=87602661419259&w=2
http://www.iss.net/security_center/static/7244.php
http://www.redhat.com/support/errata/rh42-errata-general.html#db

Get alerted when CVE-1999-1330 or the next vulnerability affects your stack