PT-1992-1004 · Sun · Sunos

Published 1992-12-30 · Updated 2017-10-10 · CVE-1999-1021

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SunOS versions 4.1 through 4.1.2

Description The issue allows a local user to gain root access by exploiting the fact that NFS ignores the high order 16 bits in a 32 bit UID. This can be achieved if the lower 16 bits are set to 0.

Recommendations For SunOS versions 4.1 through 4.1.2, apply the NFS jumbo patch upgrade to resolve the issue.

Fix

Related Identifiers

CVE-1999-1021

Affected Products

Sunos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1021 · Security Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba · Patch
• http://securityfocus.com/bid/47 · Vendor Advisory
• http://cert.org/advisories/CA-1992-15.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82 · Note