Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-1123 — Sunos vulnerability

5 documents4 sources

Severity

7.2HIGHNVD

EPSS

1.1%

top 21.91%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SUN Sunos

Timeline

PublishedMay 20

Latest updateApr 30

Description

The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDsun/sunos4.0.3, 4.1, 4.1.1+2

Patches

Patch: sunsolve.sun.com ↗Patch: www.cert.org ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-4538-g7mm-6mqj: The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall↗2022-04-30

▶

CVEList

CVE-1999-1123: The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall↗2001-09-12

▶

💥Exploits & PoCs

Exploit-DB

SunOS 4.1.1 - '/usr/release/bin/makeinstall' Local Privilege Escalation↗1999-11-23

▶

Exploit-DB

SunOS 4.1.1 - '/usr/release/bin/winstall' Local Privilege Escalation↗1999-11-12

▶