Quick answers
- Is CVE-1999-0323 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0323 being exploited in the wild.
- How severe is CVE-1999-0323?
- Critical severity, with a CVSS score of 10, published 20 February 1998.
- Which products and versions are affected?
- FreeBSD FreeBSD; NetBSD NetBSD.
- Is there a fix for CVE-1999-0323?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0323 attacked?
- It is attacked with local access, in an operating system.
- Am I affected by CVE-1999-0323?
- Check whether you run Bsdi Bsd Os, Freebsd, Netbsd or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A vulnerability exists in the mmap system call implementation within FreeBSD and NetBSD. The flaw allows a local user to map a file into memory with write permissions even if the file is marked with the 'append-only' or 'immutable' system flags. By modifying the memory-mapped region, the attacker can bypass filesystem-level protections intended to preserve the integrity of critical system files and logs. This is a local privilege escalation or integrity bypass vulnerability. Patches were historically addressed in NetBSD-SA1998-003 and corresponding FreeBSD security updates.
Affected products
- FreeBSD FreeBSD
- NetBSD NetBSD
Timeline
- 1998-02-20: disclosed
- 1998-02-20: advisory