CVE-1999-1586
published 1999-12-31CVE-1999-1586: loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability…
PriorityP416high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.36%
28.2th percentile
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | openwindows | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7wf9-677m-783w: loadmodule in SunOS 4
ghsa_unreviewed·2022-04-30·CVSS 10.0
CVE-1999-1586 [CRITICAL] GHSA-7wf9-677m-783w: loadmodule in SunOS 4
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
GHSA
GHSA-8jjf-pj37-wq93: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4
ghsa_unreviewed·2022-04-30·CVSS 7.2
CVE-1999-1584 [HIGH] GHSA-8jjf-pj37-wq93: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
1999-12-31
Published