CVEvulnerability

CVE-1999-1586

7.2 HIGH Published 1999-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 1999-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.

Affected configurations

• sun sunos 4.1.1 • sun sunos 4.1.2 • sun sunos 4.1.3 • sun sunos 4.1.3c

References

http://www.cert.org/advisories/CA-1995-12.html Patch, Third Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/g-02.shtml Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/498 exchange.xforce.ibmcloud.com
http://www.cert.org/advisories/CA-1995-12.html Patch, Third Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/g-02.shtml Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/498 exchange.xforce.ibmcloud.com