CVE-1999-0860

CVSS 2.0 Score 2.1 of 10 (low)

Details

Published Dec 1, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0860 is a vulnerability affecting the Solaris operating system. This issue allows local users to gain unauthorized access to files owned by the bin user, by manipulating the VMSYS environmental variable and employing symlink attacks. The chkperm utility is the root cause, as it fails to properly restrict access to files based on ownership. This weakness poses a significant security risk, as sensitive data and system files could potentially be read by unintended users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Sun Solaris
  • SunOS

Affected Vendors

  • Oracle Corp
  • Sun.