CVE-1999-0676: Medium severity Sun Solaris vulnerability
sdtcmconvert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sdtcm_convertfrom your environment.If sdtcm_convert is not required, uninstall or remove the sdtcm_convert binary from affected Solaris/SunOS systems to eliminate the vulnerable component.
- Configuration
Restrict filesystem permissions/ACLs for the installed sdtcm_convert binary so that only root or designated administrators can execute or modify it; remove execute/write permissions from unprivileged accounts.
sdtcm_convert (Solaris) filesystem permissions / access = restrict to administrative users only - Compensating control
Prevent untrusted local user access to affected systems until a fix is available — e.g., disable or restrict local interactive accounts, enforce strict PAM/login controls, or isolate vulnerable hosts on the network.
- Operational
Audit systems for indicators of symlink exploitation (look for unexpected changes to sensitive files) and verify integrity of sensitive files; restore any overwritten files from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0676?
CVE-1999-0676 has a medium severity rating because it allows local users to exploit symlink vulnerabilities.
How do I fix CVE-1999-0676?
To fix CVE-1999-0676, ensure proper configurations and permissions are set to prevent symlink attacks.
Who is affected by CVE-1999-0676?
CVE-1999-0676 affects users of Solaris 2.5, 2.5.1, and 2.6, as well as SunOS versions 5.5 and 5.5.1.
What type of attack is associated with CVE-1999-0676?
CVE-1999-0676 is associated with a symlink attack that allows local file overwrites.
Is CVE-1999-0676 a remote or local vulnerability?
CVE-1999-0676 is a local vulnerability that requires access to the system to exploit.