Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Dec 19, 1996· Updated Apr 16, 2026

CVE-1999-1385

CVE-1999-1385

Description

Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.

Affected products

6

FreeBSD/FreeBSD6 versions
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*range: <=2.1.0
- cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

ftp.freebsd.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.ascnvdPatchVendor Advisory
marc.infonvd
www.iss.net/security_center/static/7465.phpnvd
www.osvdb.org/6085nvd

News mentions

0

No linked articles in our index yet.