Skip to content

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain...

7.2 HighPublic exploit

CVE-1999-0691 is a high vulnerability (CVSS 7.2) in Cde, published September 13, 1999. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 57th percentile. No source names a fixed version.

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Exploit likelihood

0.84%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Record: CVE-1999-0691
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Record: CVE-1999-0691
Updated: 2026-11-02

EUVDEUVD-1999-0673 No score

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Record: EUVD-1999-0673
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rq63-6647-rqxc No score

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain...

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

Record: GHSA-rq63-6647-rqxc
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer Overflow	1999-09-13

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References