CVE:CVE-1999-0691
CNNVD:CNNVD-199909-022
CDE dtaction实用程序的AddSuLog函数存在缓冲区溢出漏洞。本地用户可以借助一个长用户名获得根权限。
solution:Upgrade cde cde to a higher version than 1.0.1,1.0.2,1.1,1.2,2.0,2.1,and avoid the version 1.0.1,1.0.2,1.1,1.2,2.0,2.1; Upgrade digital unix to a higher version than 4.0d,4.0e,4.0f,and avoid the version 4.0d,4.0e,4.0f; Upgrade ibm aix to a higher version than 4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.2,4.2.1,4.3,4.3.1,4.3.2,and avoid the version 4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.2,4.2.1,4.3,4.3.1,4.3.2; Upgrade sun solaris to a higher version than 2.4,2.5.1,2.6,7.0,and avoid the version 2.4,2.5.1,2.6,7.0; Upgrade sun sunos to a higher version than 5.4,5.5,5.5.1,5.7,and avoid the version 5.4,5.5,5.5.1,5.7