CVE-1999-0786: Medium severity Sun Solaris vulnerability
The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the dynamic linker does not honor the LD_PROFILE environment variable for unprivileged/local users. Remove or unset LD_PROFILE from environment for services and user sessions where it is not required, and configure the runtime linker to ignore LD_PROFILE for non-privileged processes.
Solaris dynamic linker LD_PROFILE = ignored / unset for untrusted users - Compensating control
Until an official patch is available, restrict local account access and limit untrusted users' ability to modify or create files in directories that could be abused by a symlink attack. Apply filesystem permissions and host access controls to reduce local exploit opportunities.
- Operational
Audit the filesystem for unexpected files and symbolic links that may have been created via LD_PROFILE, investigate any suspicious artifacts, and remove malicious files. Monitor for use of LD_PROFILE in process environments and review logs for signs of exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0786?
CVE-1999-0786 is considered a high severity vulnerability due to the potential for arbitrary file creation.
How do I fix CVE-1999-0786?
To mitigate CVE-1999-0786, users should avoid using the LD_PROFILE environment variable and apply any available updates for Solaris or SunOS.
Who is affected by CVE-1999-0786?
CVE-1999-0786 affects local users on Solaris versions 2.4, 2.5, 2.5.1, 2.6 and SunOS versions 5.4, 5.5, 5.5.1.
What kind of attack does CVE-1999-0786 enable?
CVE-1999-0786 enables a symlink attack that allows local users to create arbitrary files on the system.
When was CVE-1999-0786 discovered?
CVE-1999-0786 was disclosed in 1999, highlighting a vulnerability in the dynamic linker of Solaris systems.