CVE-1999-0101

CRITICAL ⚠ Exploit

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS8.4%
Percentile95th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
◆ AI Analysis — automated analysis, not human-reviewed

A buffer overflow vulnerability in the 'gethostbyname' library call on AIX and Solaris systems can be exploited by an attacker to gain root access through the use of corrupt DNS host names.

BSID: BS-1996-GLOBAL-307627-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-1999-0101?
A buffer overflow vulnerability in the 'gethostbyname' library call on AIX and Solaris systems can be exploited by an attacker to gain root access through the use of corrupt DNS host names.
What is the CVSS score for CVE-1999-0101?
CVE-1999-0101 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 8.4%.
Is CVE-1999-0101 actively exploited?
Public exploit available for CVE-1999-0101. Exploitation risk elevated.
How do I remediate CVE-1999-0101?
Priority: IMMEDIATE. PSIRT: [email protected]
What systems are affected by CVE-1999-0101?
CVE-1999-0101 affects Ibm Aix.
Vulnerability Details
CVE IDCVE-1999-0101
BSIDBS-1996-GLOBAL-307627-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published1996-12-10
Last Modified2026-06-16
ICS Relevance0%
SourceNVD
Official Description

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered when the 'gethostbyname' function processes a maliciously crafted DNS response that exceeds the buffer size allocated for it. This can lead to a buffer overflow, allowing an attacker to execute arbitrary code with root privileges.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Ibm Aix 3.2 4.1 4.2
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 10909 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Ibm
CVE-1999-0099 10.0 Buffer overflow in syslog utility allows local or remote attackers to gain ro... CVE-1999-0088 10.0 IRIX and AIX automountd services (autofsd) allow remote users to execute root... CVE-1999-0835 10.0 Denial of service in BIND named via malformed SIG records. CVE-2000-0848 10.0 Buffer overflow in IBM WebSphere web application server (WAS) allows remote a... CVE-2002-0743 10.0 mail and mailx in AIX 4.3.3 core dump when called with a very long argument, ...
View all Ibm CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →