CVE-1999-0973: Buffer Overflow
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Solaris snoopfrom your environment.Uninstall or remove the snoop program if it is not required on the system to eliminate exposure to this vulnerability.
- Configuration
Do not run snoop in verbose mode. Avoid launching snoop with verbose flags (e.g., -v) or equivalent options that enable verbose output.
snoop (Solaris) verbose mode = disabled - Operational
If snoop must be used, run it under an unprivileged account (do not run snoop as root) and only for as long as necessary; restrict who can execute the binary until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0973?
CVE-1999-0973 is classified as a high-severity vulnerability due to the potential for remote attackers to gain root privileges.
How do I fix CVE-1999-0973?
To fix CVE-1999-0973, disable the snoop program or apply the appropriate patches provided by the vendor.
Which versions of Solaris are affected by CVE-1999-0973?
CVE-1999-0973 affects Solaris versions 2.4, 2.5, 2.5.1, 2.6, and 7.0, as well as various SunOS versions.
What type of vulnerability is CVE-1999-0973?
CVE-1999-0973 is a buffer overflow vulnerability that can be exploited remotely.
What attack vector is used in CVE-1999-0973?
CVE-1999-0973 can be exploited by sending a specially crafted long domain name to the snoop program running in verbose mode.