PT-1994-1021 · Sun · Sunos

Published 1994-05-13 · Updated 2008-09-05 · CVE-1999-1388

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SunOS versions 4.1.x

Description The issue allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. This is related to the passwd functionality in SunOS.

Recommendations For SunOS versions 4.1.x, avoid using the -F command line argument with the passwd command until a fix is available. As a temporary workaround, consider restricting access to the passwd command to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-1999-1388

Affected Products

Sunos

References · 4

• 🔥 http://www2.dataguard.no/bugtraq/1994_2/0197.html · Exploit
• http://www2.dataguard.no/bugtraq/1994_2/0207.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1388 · Security Note
• http://dataguard.no/bugtraq/1994_4/0755.html · Vendor Advisory