CVE-1999-0860: Low severity Sun Solaris vulnerability
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Solaris chkpermfrom your environment.If chkperm is not required on the system, uninstall or remove the chkperm executable to eliminate this attack vector.
- Configuration
Remove or unset the VMSYS environment variable for unprivileged/local user sessions and ensure it is not passed to chkperm invocations.
Environment (VMSYS) VMSYS = unset/empty for unprivileged users - Compensating control
Restrict execution of chkperm to trusted administrators (for example by tightening file permissions or controlling access via sudoers) so that unprivileged local users cannot exploit the VMSYS/symlink issue.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0860?
CVE-1999-0860 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-1999-0860?
To fix CVE-1999-0860, ensure that the VMSYS environmental variable is properly restricted to prevent symlink attacks.
What software versions are affected by CVE-1999-0860?
CVE-1999-0860 affects Solaris versions 2.5.1, 2.6, 7.0, and various SunOS versions including 5.5.1 and 5.7.
Who can exploit CVE-1999-0860?
Local users can exploit CVE-1999-0860 to gain unauthorized access to files owned by the 'bin' user.
What are the consequences of CVE-1999-0860?
The consequences of CVE-1999-0860 include unauthorized access to sensitive files, which can lead to further security breaches.