CVE-1999-0948: Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

Security readout for executives and security teams

CVE-1999-0948 is a local privilege escalation in the Canna input system's uum program. A local user could potentially exploit a buffer overflow to gain root privileges. The source bundle does not identify affected versions, vendor fixes, or current exploitation. Exposure appears limited to systems that have the Canna input system and uum program installed. The bundle does not name operating systems, distributions, packages, or affected versions, so validation must start with asset inventory. Treat as high priority where legacy Unix-like systems are multi-user or still run Canna. Business urgency is lower if no Canna or uum installation exists. The first decision point is confirming exposure. Mitigation focus: Inventory systems for Canna and the uum program.; Check OS or Canna vendor guidance for fixed packages or removal instructions.; Remove or disable Canna components that are not business-required..

Prepared

Jul 12, 2026, 06:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.