t daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-0192","sourceIdentifier":"cve@mitre.org","published":"1997-10-18T04:00:00.000","lastModified":"2026-06-16T21:47:51.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.2:*:*:*:*:*:*:*","matchCriteriaId":"852B55FE-8180-4357-B717-399C16954C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.9:*:*:*:*:*:*:*","matchCriteriaId":"15CB96AA-7CC1-4F01-8E9A-F85CD851594A"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3B1DD9-10B5-40FE-AE56-D068C41653DE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},