CVE-1999-0966: Buffer Overflow
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Temporarily remove or disable the setuid bit from non-essential setuid-root binaries (or otherwise prevent their execution) to reduce the risk that a local user can exploit the libc getopt overflow to gain root.
SunOS setuid_binaries = disabled/removed for non-essential binaries - Compensating control
Restrict local user access: disable or remove unneeded local accounts, limit who can log in interactively, and restrict execution of untrusted binaries (use file system permissions, RBAC, or host-based policies) until an official fix is available.
- Operational
Monitor and audit systems for signs of exploitation (suspicious processes, unexpected root activity, or unusually long argv[0] values). If compromise is suspected, assume root may be controlled: isolate the host, perform forensic analysis, rebuild or restore from known-good media, and rotate/root credentials.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0966?
CVE-1999-0966 has a high severity rating due to the potential for local users to gain root privileges.
How do I fix CVE-1999-0966?
To fix CVE-1999-0966, apply the appropriate patches provided by Sun Microsystems for SunOS 5.5.
What systems are affected by CVE-1999-0966?
CVE-1999-0966 affects systems running SunOS version 5.5.
Can CVE-1999-0966 be exploited remotely?
CVE-1999-0966 cannot be exploited remotely as it requires local access to the vulnerable system.
What impact does CVE-1999-0966 have on system security?
CVE-1999-0966 allows local users to execute arbitrary code with root privileges, posing a significant security risk.