Lucene search
HistoryDec 31, 1999 - 5:00 a.m.
CVE-1999-1330
cve-1999-1330
snprintf
db library 1.85.4
buffer overflow
nvd
7.5 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
23.9%
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:debian_linux | debian debian linux | eq | 4.0 |
| redhat:linux | redhat linux | eq | 4.2 |
7.5 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
23.9%