CVEvulnerability
CVE-1999-1080
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 1995-05-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Affected configurations
• sun sunos 5.7
References
- http://marc.info/?l=bugtraq&m=92633694100270&w=2 marc.info
- http://marc.info/?l=bugtraq&m=93971288323395&w=2 marc.info
- http://www.securityfocus.com/bid/250 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=92633694100270&w=2 marc.info
- http://marc.info/?l=bugtraq&m=93971288323395&w=2 marc.info
- http://www.securityfocus.com/bid/250 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350 exchange.xforce.ibmcloud.com