CVE-1999-0691

CVE-1999-0691 describes a buffer overflow vulnerability in the AddSuLog function of the CDE dtaction utility, impacting various systems including CDE, Digital UNIX, IBM AIX, and Sun Solaris. This flaw allows local users to achieve root privileges by supplying an excessively long username. Rated with a CVSS score of 7.2 (HIGH), it presents a low attack complexity and requires no authentication, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or showing active exploitation, public exploit code is available on ExploitDB, though there is minimal community discussion or media coverage surrounding this decades-old vulnerability.