add: AVE-1999-0028

Author: adysec

vulns/1999/AVE-1999-0028.toml

@@ -1,38 +1,25 @@
-[id]
-ave_id = "AVE-1999-0028"
-cve_id = "CVE-1999-0832"
-aliases = ["CVE-1999-0832"]
-
 [basic]
-title = "Linux NFS 服务器缓冲区溢出漏洞"
-description = "Linux 系统的 NFS 服务器中存在缓冲区溢出漏洞，攻击者可通过向 NFS 服务发送超长路径名请求触发缓冲区溢出，从而在目标系统上以 root 权限执行任意代码。攻击者无需身份认证即可远程利用该漏洞，完全控制受影响的主机。该漏洞影响 Caldera OpenLinux、Debian GNU/Linux、SuSE Linux 及 Red Hat Linux 等多个发行版。"
-severity = "CRITICAL"
-score = 10.0
-remediation = "升级 Linux 内核至修复版本，或应用厂商发布的安全补丁。对于 Red Hat Linux，建议升级至 RH42 或更高版本。对于 Debian 系统，应用 19991111 安全更新。"
-published = "1999-11-09T00:00:00Z"
-updated = "2026-06-16T00:00:00Z"
-sources = ["redhat", "nvd"]
-
-[affected]
-vendor = "Linux"
-product = "NFS Server"
-
-[references]
-urls = [
-    "https://nvd.nist.gov/vuln/detail/CVE-1999-0832",
-    "https://access.redhat.com/security/cve/CVE-1999-0832",
-    "http://www.debian.org/security/1999/19991111",
-    "http://www.redhat.com/support/errata/rh42-errata-general.html#NFS",
-    "http://www.securityfocus.com/bid/782",
-    "http://www.novell.com/linux/security/advisories/suse_security_announce_29.html",
-    "ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt",
-    "http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.20.9911091058140.12964-100000%40mail.zigzag.pl"
-]
+description = ""
+published = ""
+remediation = "Refer to vendor advisory and upgrade to fixed version."
+score = 0.0
+severity = "UNKNOWN"
+sources = ["redhat"]
+title = "CVE-1999-0832 漏洞"
+updated = ""
 
 [exploit]
-poc_urls = []
 exp_urls = []
+poc_urls = []
+
+[id]
+aliases = ["CVE-1999-0832"]
+ave_id = "AVE-1999-0028"
+cve_id = "CVE-1999-0832"
 
 [meta]
+collected_at = "2026-07-11T00:15:58.465403221+00:00"
 status = "completed"
-collected_at = "2026-07-11T00:00:00+00:00"
+
+[references]
+urls = []

vulns/1999/AVE-1999-0216.toml

@@ -0,0 +1,37 @@
+[id]
+ave_id = "AVE-1999-0216"
+cve_id = "CVE-1999-0034"
+aliases = ["CVE-1999-0034"]
+
+[basic]
+title = "多个Unix系统Perl suidperl本地缓冲区溢出漏洞"
+description = "Perl 4.x和5.x中的suidperl(sperl)程序存在缓冲区溢出漏洞。当该程序以setuid root方式安装时，本地攻击者可利用溢出漏洞提升权限至root，完全控制受影响的系统。受影响系统包括BSD/OS 2.1/3.0、RedHat Linux 4.0/4.1、SGI Freeware 1.0/2.0以及Larry Wall Perl 5.0.3等。攻击者通过精心构造的数据触发缓冲区溢出，从而以root权限执行任意代码。"
+severity = "HIGH"
+score = 7.2
+remediation = "升级Perl至最新版本，或移除suidperl程序的SUID权限位。同时限制本地用户对受影响系统的访问权限。"
+published = "1997-05-29"
+updated = "2026-06-16"
+sources = ["nvd", "exploitdb"]
+
+[affected]
+vendor = "Perl"
+product = "suidperl"
+
+[references]
+urls = [
+    "https://nvd.nist.gov/vuln/detail/CVE-1999-0034",
+    "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034",
+    "https://www.exploit-db.com/exploits/19547",
+    "https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19547.tgz"
+]
+
+[exploit]
+poc_urls = []
+exp_urls = [
+    "https://www.exploit-db.com/exploits/19547",
+    "https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19547.tgz"
+]
+
+[meta]
+status = "completed"
+collected_at = "2026-07-11T12:00:00Z"