CVE-1999-1140
high
📛 Threat Title
CVE-1999-1140
Description
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (4)
- cve@mitre.org NVD Recent CVEs
- cve@mitre.org NVD Recent CVEs
- cve@mitre.org NVD Recent CVEs
-
NVD detail: CVE-1999-1140
NVD Recent CVEs
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
Remediations (10)
-
web:attack.mitre.org
This mitigation can be implemented through the following measures: Remove Legacy Software: Use Case: Disable or remove older versions of software that no longer receive updates or security patches (e.g., legacy Java, Adobe Flash). Implementation: A company removes Flash Player from all employee systems after it has reached its end-of-life date.
-
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
-
web:support.servicenow.com
Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...
-
web:web.whatsapp.com
Log in to WhatsApp Web for simple, reliable and private messaging on your desktop. Send and receive messages and files with ease, all for free.
-
web:www.cisa.gov
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.
-
web:www.cve.org
At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures
-
web:www.ibm.com
IBM MQ provides regular updates containing new function and fixes. This document contains lists of available fixes for the IBM MQ 9.4 initial release and subsequent Continuous Delivery (CD) releases and CD Cumulative Security Updates (CSUs), with the most recent release or update at the top.
-
web:www.malwarebytes.com
Security researchers are warning about a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager (WHM). This is a critical, actively exploited authentication-bypass bug in cPanel/WHM that lets attackers gain administrative access to the interface without credentials, potentially take over servers and all hosted sites. The vulnerability ...
-
web:www.nexusmods.com
This mod aims to fix ( or drastically minimize) vertex explosions on shadps4 by removing certain files related to face customization that the emulator is not currently handling correctly
-
web:www.nist.gov
NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.