CVE-1999-0334: High severity Sun Solaris vulnerability
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict physical access to affected systems (console and local login). Prevent untrusted users from obtaining physical access to machines running Solaris 2.2/2.3 or SunOS until a vendor fix is available (lock server rooms, secure consoles, and limit who can access the hardware).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0334?
CVE-1999-0334 is considered a critical vulnerability due to its ability to allow local users to gain root access.
How does CVE-1999-0334 affect Solaris systems?
CVE-1999-0334 affects Solaris 2.2 and 2.3 by allowing local users with physical access to exploit a failing fsck process.
Can CVE-1999-0334 be exploited remotely?
No, CVE-1999-0334 requires physical access to the machine to be exploited.
What versions of Solaris are impacted by CVE-1999-0334?
CVE-1999-0334 impacts Solaris versions 2.2 and 2.3.
What are the recommended mitigations for CVE-1999-0334?
To mitigate CVE-1999-0334, ensure that physical access to the system is restricted and perform necessary upgrades.