CVE-1999-0056: Buffer Overflow
Buffer overflow in Sun's ping program can give root access to local users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS pingfrom your environment.If ping is not required on affected systems, uninstall or remove the ping binary to eliminate the vulnerable component.
- Configuration
Remove the setuid bit from the ping binary so it cannot run with root privileges. This prevents local users from gaining root via the vulnerable ping program.
SunOS ping (ping binary) setuid (SUID) permission = disabled - Compensating control
Restrict or limit which local accounts can execute the ping binary (use filesystem ACLs, group-based permissions, or local account restrictions) and reduce the number of untrusted local user accounts on affected systems until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0056?
CVE-1999-0056 is a critical vulnerability due to a buffer overflow allowing local users to gain root access.
How do I fix CVE-1999-0056?
To fix CVE-1999-0056, update your SunOS to a version where the vulnerability has been patched.
Which versions of SunOS are affected by CVE-1999-0056?
CVE-1999-0056 affects SunOS versions 5.3, 5.4, 5.5, and 5.5.1.
What is the impact of exploiting CVE-1999-0056?
Exploiting CVE-1999-0056 allows local users to execute arbitrary code with root privileges.
Is CVE-1999-0056 still a concern today?
While CVE-1999-0056 was identified over two decades ago, any systems still using vulnerable versions remain at risk.