CVE Catalog

CVE-1999-1588

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
9.85%

95th percentile - higher than 95% of all known CVEs

Summary

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

Risk Assessment

Attackers may gain full control of the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update the system to the latest version that is not vulnerable to this flaw and to monitor port 2766 for unauthorized access attempts.

Original NVD description (English source)

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS