CVE-1999-0859: Low severity Sun Solaris vulnerability
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Solaris arpfrom your environment.If the arp utility is not required on the system, uninstall or remove the arp binary to eliminate the vulnerability risk.
- Configuration
Restrict execution of the arp binary so that only the root/privileged account(s) can run it (remove execute permission for unprivileged local users). This prevents local users from invoking arp -f to read arbitrary files.
Solaris arp utility execute_permission = root-only - Compensating control
Prevent untrusted local users from accessing the system or limit which local accounts can execute network utilities (e.g., via sudoers rules, filesystem ACLs, or RBAC). Restrict local account privileges until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0859?
CVE-1999-0859 is considered a low-severity vulnerability as it allows local users to read files but does not allow remote access.
How do I fix CVE-1999-0859?
To fix CVE-1999-0859, restrict access to the Solaris arp command or implement appropriate file permissions to prevent unauthorized file reading.
What platforms are affected by CVE-1999-0859?
CVE-1999-0859 affects Solaris versions 2.5.1, 2.6, 7.0, and various SunOS versions.
What type of vulnerability is CVE-1999-0859?
CVE-1999-0859 is a local file disclosure vulnerability that allows local users to read illegitimate file contents.
Can CVE-1999-0859 be exploited remotely?
CVE-1999-0859 cannot be exploited remotely as it requires local access to the system.