CVE-1999-0691: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privil...

Security readout for executives and security teams

This is an old local privilege-escalation flaw in the CDE dtaction utility. A user who already has local access may be able to become root by triggering a buffer overflow with an overly long user name. Exposure is most plausible on legacy Unix systems still running CDE and the dtaction utility. The source bundle references HP and Sun advisories, but exact affected products and versions are not included. Treat this as high priority for any still-operational legacy CDE estate because successful exploitation may grant root. It is not an internet-facing remote issue based on the provided evidence. Mitigation focus: Check the HP and Sun advisories for applicable patches or configuration guidance.; Inventory legacy CDE installations and remove CDE where it is no longer required.; Restrict local interactive accounts on affected Unix hosts to trusted administrators..

Prepared

Jul 12, 2026, 06:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.