CVE-1999-1385

CVSS 7.2 - HIGH

Description

Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.

Affected Products

6

Vendor	Product	Version
freebsd	freebsd	`All versions`
freebsd	freebsd	`1.0`
freebsd	freebsd	`1.1`
freebsd	freebsd	`2.1.5`
freebsd	freebsd	`2.1.6`
freebsd	freebsd	`2.1.6.1`

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/...

http://marc.info/?l=bugtraq&m=87602167420332&w=2

http://www.iss.net/security_center/static/7465.php

http://www.osvdb.org/6085

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/...

http://marc.info/?l=bugtraq&m=87602167420332&w=2

http://www.iss.net/security_center/static/7465.php

http://www.osvdb.org/6085

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-1999-1385
Published:: 1996-12-19
Modified:: 2026-04-16
CVSS Score:: 7.2
Severity:: HIGH
Vector:: AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors

freebsd

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL