CVE-1999-0952: Buffer Overflow
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
lpstat (Oracle Solaris)from your environment.Remove, rename, or uninstall the lpstat binary from affected Oracle Solaris systems (or otherwise make it unavailable) until a vendor-supplied patch is applied to eliminate the local root escalation vulnerability.
- Configuration
Disable the printing client/service that provides lpstat (stop the service and disable it from starting) or otherwise prevent lpstat from being executed until an official fix is available.
Oracle Solaris lpstat / print service enabled = false - Compensating control
Prevent untrusted local users from running lpstat by restricting execution (e.g., tighten file permissions, restrict access via sudoers or local policies) and reduce local account privileges; maintain this restriction until the vendor provides and you install a patch.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0952?
CVE-1999-0952 is considered a critical vulnerability due to the potential for local users to gain root access.
How do I fix CVE-1999-0952?
To fix CVE-1999-0952, users should apply available patches or updates provided by Oracle for affected versions of Solaris.
Who is affected by CVE-1999-0952?
Local users on Solaris 5.7 and Solaris 2.6 systems are affected by CVE-1999-0952.
What systems are vulnerable to CVE-1999-0952?
CVE-1999-0952 affects SunOS 5.7 and Solaris 2.6 operating systems.
What is the cause of CVE-1999-0952?
CVE-1999-0952 is caused by a buffer overflow in the lpstat command when handling the class argument.