CVE-1999-1584 — Sunos vulnerability

6 documents3 sources
Severity
10.0CRITICALNVD
NVD7.2
EPSS
0.5%
top 35.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN OpenwindowsSUN Sunos
Timeline
PublishedDec 31
Latest updateApr 30

Description

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDsun/sunos4 versions+3

Patches

Patch: sunsolve.sun.com ↗Patch: www.cert.org ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-7wf9-677m-783w: loadmodule in SunOS 4↗2022-04-30
▶
GHSA
GHSA-8jjf-pj37-wq93: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4↗2022-04-30
▶
CVEList
CVE-1999-1584: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4↗2005-08-30
▶
CVEList
CVE-1999-1586: loadmodule in SunOS 4↗2005-08-30
▶
CVE-1999-1584 — SUN Sunos vulnerability | cvebase