CVE-1999-0164: Race Condition
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS/psfrom your environment.Temporarily remove, rename, or replace the vulnerable ps binary (for example, move /usr/bin/ps to a different path) on affected systems until an official patch is applied.
- Configuration
Tighten filesystem permissions or ACLs on the ps binary (e.g., /usr/bin/ps) so only root or trusted administrative accounts can execute it until a vendor fix is available.
SunOS ps command file permissions / execution rights = restricted to root/administrators - Compensating control
Apply access controls and isolation to minimize exposure: restrict untrusted local user accounts from logging in or running arbitrary commands on affected hosts, and isolate vulnerable systems on the network (ACLs/segmentation) to limit attacker access.
- Operational
Perform integrity checks and forensic/operational recovery: scan critical files for unauthorized modifications, restore affected files from known-good backups where necessary, and review logs for exploitation indicators. Repeat after the remediation is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0164?
CVE-1999-0164 is classified as a high-severity vulnerability due to its potential to allow an attacker to overwrite critical files.
How do I fix CVE-1999-0164?
To fix CVE-1999-0164, update the Solaris operating system to a version that is not affected by this vulnerability.
What systems are affected by CVE-1999-0164?
CVE-1999-0164 affects specific versions of SunOS, primarily versions 5.3 and 5.4.
What type of vulnerability is CVE-1999-0164?
CVE-1999-0164 is a race condition vulnerability linked to the Solaris ps command.
Can CVE-1999-0164 be exploited remotely?
CVE-1999-0164 can potentially be exploited locally by an authenticated user with access to execute the ps command.