CVE-1999-1586 — Sunos vulnerability
6 documents3 sources
Severity
10.0CRITICALNVD
NVD7.2
EPSS
0.1%
top 77.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateApr 30
Description
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0
Affected Packages2 packages
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-8jjf-pj37-wq93: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4↗2022-04-30
CVEList▶
CVE-1999-1584: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4↗2005-08-30