CVE-1999-1471
HighExploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
Risk Assessment
Local users can exploit this vulnerability to gain full control over the system, posing a serious security threat.
Recommendation
It is recommended to upgrade the system to a newer version that is not vulnerable to this buffer overflow.
Other vulnerabilities in passwd
See all- CVE-2000-0492Medium
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, allowing an attacker with access to the password file to easily decrypt the passwords.
- CVE-1999-1162Medium
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
Original NVD description (English source)
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.