CVE-1999-0277: High severity Sun SunOS vulnerability
The WorkMan program can be used to overwrite any file to get root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS/WorkManfrom your environment.Uninstall or delete the WorkMan program/executable from all affected SunOS systems to eliminate the arbitrary file overwrite and local root escalation vector.
- Configuration
Change ownership and permissions of the WorkMan binary so non-privileged users cannot run it (for example, chown root:root and chmod 700), and remove the setuid bit if present (chmod u-s) until the program is safely removed or patched.
WorkMan executable on SunOS file permissions and ownership = restrict execution to administrators; remove execute for non-privileged users; remove setuid if present - Compensating control
If immediate removal or permission changes are not possible, restrict which accounts can access or execute the WorkMan binary using filesystem ACLs, RBAC, or MAC controls; isolate affected hosts from untrusted networks and restrict user access until the binary is removed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0277?
CVE-1999-0277 is considered a critical vulnerability as it allows attackers to gain root access by overwriting any file.
How do I fix CVE-1999-0277?
To fix CVE-1999-0277, you should upgrade the affected WorkMan program to a version that does not contain the vulnerability.
What systems are affected by CVE-1999-0277?
CVE-1999-0277 affects SunOS 5.0 systems that have the WorkMan program installed.
Can exploitation of CVE-1999-0277 lead to data loss?
Yes, exploitation of CVE-1999-0277 can lead to data loss as attackers can overwrite any file on the affected system.
Is there a workaround for CVE-1999-0277?
A potential workaround for CVE-1999-0277 is to restrict access to the WorkMan program until a fix is applied.