CVE-1999-0339: Buffer Overflow
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict local user accounts and access: disable or remove unneeded local accounts, restrict who can log in locally or via SSH, and limit administrative access to a small set of trusted accounts (least privilege).
- Compensating control
Limit physical and console access to Solaris hosts and restrict access to local management interfaces to trusted personnel or management network segments.
- Operational
Monitor Oracle/Solaris vendor advisories for a libauth/ZFS/Solaris patch or update and apply the vendor-provided fix as soon as it is available.
- Operational
Audit systems for evidence of local privilege escalation; if compromise is suspected, isolate affected hosts, rotate any potentially exposed credentials, and rebuild or restore systems from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0339?
CVE-1999-0339 is considered a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-1999-0339?
To fix CVE-1999-0339, update the libauth library to a version that addresses the buffer overflow vulnerability.
Who is affected by CVE-1999-0339?
CVE-1999-0339 affects local users on systems running specific versions of SunOS and Solaris.
What impact can CVE-1999-0339 have on my system?
CVE-1999-0339 could allow local users to gain elevated privileges, potentially leading to full control over the affected system.
Is CVE-1999-0339 a remote attack vulnerability?
No, CVE-1999-0339 requires local access to exploit the buffer overflow vulnerability.