peter bassill · operator
$ cve CVE-1999-0040 JSON

CVE-1999-0040 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 68)

Patch early

A public exploit exists.

Description

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS1.23% — more likely to be exploited than 68% of all CVEs
On CISA KEVno
Public exploityes
Published1997-05-01
Last modified2026-06-16

Affected (10)

VendorProduct
bsdibsd os
freebsdfreebsd
hphp-ux
ibmaix
necasl ux 4800
necews-ux v
necup-ux v
sgiirix
sunsolaris
sunsunos

Public exploits

SourceTitleDate
exploit-dbBSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (1)1997-08-25
exploit-dbBSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (2)1997-08-25
exploit-dbBSD/OS 2.1 / Caldera UnixWare 7/7.1.0 / FreeBSD 1.1.5.1/2.0 / HP HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.3 / SunOS 4.1.4 - 'libXt Library' Local Overflow / Local Privilege Escalation (3)1997-08-25
exploit-dbLibXt - 'XtAppInitialize()' Local Overflow *xterm1997-05-14
exploit-dbXt Library - Local Privilege Escalation1996-08-24

References

→ the Explorer  ·  watch your stack  ·  NVD