← Vulnerability feed

Vulnerability record · CVE-1999-1471 · published 1 January 1989

CVE-1999-1471: Bsd vulnerability

Bsd · Bsd

Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.

7.2 CVSS 2.0 High EPSS 0.50% · top 59.4%
7.2CVSS 2.0 base score
0.50%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cert.org/advisories/CA-1989-01.html PatchThird Party AdvisoryUS Government Resource
http://www.iss.net/security_center/static/7152.php
http://www.securityfocus.com/bid/4 PatchVendor Advisory
http://www.cert.org/advisories/CA-1989-01.html PatchThird Party AdvisoryUS Government Resource
http://www.iss.net/security_center/static/7152.php
http://www.securityfocus.com/bid/4 PatchVendor Advisory

Track CVE-1999-1471 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2001-0670Bsd vulnerabilityBuffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code v…EPSS 6.6%7.1CVE-2008-4609Bsd vulnerabilityThe TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems…EPSS 32%5.0CVE-2014-7250Bsd vulnerabilityThe TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, …EPSS 4.7%5.0CVE-1999-1098Bsd vulnerabilityVulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.EPSS 1.4%2.1CVE-1999-1102Sgi irix vulnerabilitylpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlin…EPSS 0.43%2.1CVE-1999-1394Bsd vulnerabilityBSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmo…EPSS 0.61%2.1CVE-1999-1214Sgi irix vulnerabilityThe asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local us…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-1999-1471), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.