PT-1992-1004 · Sun · Sunos

Publicado 1992-12-30 · Atualizado 2017-10-10 · CVE-1999-1021

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SunOS versions 4.1 through 4.1.2

Description The issue allows a local user to gain root access by exploiting the fact that NFS ignores the high order 16 bits in a 32 bit UID. This can be achieved if the lower 16 bits are set to 0.

Recommendations For SunOS versions 4.1 through 4.1.2, apply the NFS jumbo patch upgrade to resolve the issue.

Correção

Identificadores relacionados

CVE-1999-1021

Produtos afetados

Sunos

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1021 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba · Correção
• http://securityfocus.com/bid/47 · Aviso do Fabricante
• http://cert.org/advisories/CA-1992-15.html · Correção