CVE-1999-1166

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/18156Patch, Vendor Advisory
http://www.securityfocus.com/bid/523Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/18156Patch, Vendor Advisory
http://www.securityfocus.com/bid/523Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 11, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11676.4Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pa CVE-1999-11687.2install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of CVE-1999-11695.0nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.CVE-1999-11704.6IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-11714.6IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 CVE-1999-11725.0By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the ca CVE-1999-11744.6ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known dis CVE-1999-11757.5Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote atta CVE-1999-11775.0Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the p CVE-1999-11805.0O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (CVE-1999-11897.5Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, a CVE-1999-119010.0Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" hea