Read the docs
TI-1999-00994 Aliases CVE-1999-1044GHSA-74gm-9j59-cq94

Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d…

Priority LOW 21Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.

Why it matters now

EPSS 0.00307 23rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:digital:unix:*:*:*:*:*:*:*:*up to v4.0dVulnerableDigital
cpe:2.3:o:digital:unix:v4.0:*:*:*:*:*:*:*v4.0VulnerableDigital
  • cpe:2.3:o:digital:unix:*:*:*:*:*:*:*:* Versions up to v4.0d Vulnerable ·Digital
  • cpe:2.3:o:digital:unix:v4.0:*:*:*:*:*:*:* Versions v4.0 Vulnerable ·Digital

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-1999-1044
  2. 2026-10-03 Alias added: GHSA-74gm-9j59-cq94

References

Advisory 1

Other 1

  • TI-1999-00506 ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. CVSS 2.0MEDIUM 5.0
  • TI-2001-00134 Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management… CVSS 2.0HIGH 10.0
  • TI-1999-00072 Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH… CVSS 2.0HIGH 10.0
  • TI-1999-00638 The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. CVSS 2.0HIGH 7.5
  • TI-2001-00362 Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to… CVSS 2.0HIGH 7.2
  • TI-1999-00642 Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users… CVSS 2.0HIGH 7.2
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences