CVE-1999-1166
HighExploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Linux version 2.0.37 does not properly encode the Custom segment limit, allowing local users to gain root privileges by accessing and modifying kernel memory.
Risk Assessment
This vulnerability poses a serious security risk as local users can gain full administrative privileges.
Recommendation
It is recommended to update the system to a newer kernel version that addresses this vulnerability.
Other vulnerabilities in Linux 2.0.37
See all- CVE-1999-0414Medium
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
- CVE-2000-0289Medium
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
- CVE-1999-0986Medium
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
- CVE-1999-1352Medium
The mknod command in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
- CVE-1999-0400Medium
CVE-1999-0400 affects Linux version 2.2.0, where executing the ldd command on a core file can lead to a denial of service attack.
- CVE-1999-0451Low
CVE-1999-0451 vulnerability in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
- CVE-1999-0401Low
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
- CVE-1999-1441Low
Linux version 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, allowing local users to cause a denial of service by sending SIGIO to processes that do not catch it.
Original NVD description (English source)
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.