CVE-1999-0048: Debian Netkit

High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

Affected products

• Debian Netkit: version 0.07 only
• IBM Aix: version 3.1 only; version 4.1 only; version 4.2 only
• Nec Asl Ux 4800: any version
• Nec Ews-Ux V: any version
• Nec Up-Ux V: any version

Published 1997-01-27. Last modified 2026-06-16.