Critical severity9.8NVD Advisory· Published Dec 31, 1999· Updated Apr 16, 2026

CVE-1999-1588

Description

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

Affected products

Sun Corporation/Solaris3 versions
cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*+ 2 more
- cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security-protocols.com/sploits/unsorted_exploits/nlps_server.cnvdExploit
www.securityfocus.com/bid/2319nvdExploit
www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.cnvdExploit
lsd-pl.net/files/getnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.015
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000