CVE-1999-1021
published 1992-12-30CVE-1999-1021: NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0…
PriorityP418high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.41%
33.4th percentile
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | sunos | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Sun SunOS 4.1/4.1.1/4.1.2 NFS uid Local Privilege Escalation (CA-1992-15 / XFDB-82)
vuldb·2026-04-16·CVSS 7.2
CVE-1999-1021 [HIGH] Sun SunOS 4.1/4.1.1/4.1.2 NFS uid Local Privilege Escalation (CA-1992-15 / XFDB-82)
A vulnerability has been found in Sun SunOS 4.1/4.1.1/4.1.2 and classified as problematic. This affects an unknown part of the component NFS. Performing a manipulation of the argument uid results in Local Privilege Escalation.
This vulnerability was named CVE-1999-1021. The attack needs to be approached locally. There is no available exploit.
The affected component should be upgraded.
GHSA
GHSA-5xf6-9pfj-rr6g: NFS on SunOS 4
ghsa_unreviewed·2022-04-30
CVE-1999-1021 [HIGH] GHSA-5xf6-9pfj-rr6g: NFS on SunOS 4
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sbahttp://www.cert.org/advisories/CA-1992-15.htmlhttp://www.securityfocus.com/bid/47https://exchange.xforce.ibmcloud.com/vulnerabilities/82http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sbahttp://www.cert.org/advisories/CA-1992-15.htmlhttp://www.securityfocus.com/bid/47https://exchange.xforce.ibmcloud.com/vulnerabilities/82
1992-12-30
Published