CVE-1999-1014: Buffer Overflow
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove the affected component from your environment.
If the mail command is not required on the system, uninstall or remove the mail program to eliminate the vulnerable binary from Solaris / SunOS hosts.
- Configuration
Modify filesystem permissions for the mail binary to remove any setuid bit and restrict execution so only root or designated administrative accounts can run it, preventing local unprivileged users from invoking the vulnerable command.
mail command (Solaris / SunOS) file execution / setuid = remove setuid and restrict execution to privileged accounts only - Compensating control
Restrict local user access and logins on affected Solaris / SunOS hosts (for example via host-based access controls, disabling unnecessary local accounts, or limiting who can obtain interactive shells) to reduce exposure to local privilege escalation via the vulnerable mail -m argument.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1014?
CVE-1999-1014 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-1999-1014?
To mitigate CVE-1999-1014, users should apply the latest security patches provided for Solaris 2.7 and other affected versions.
Who is affected by CVE-1999-1014?
CVE-1999-1014 affects local users of Solaris 2.7 and SunOS 5.7 who can exploit the buffer overflow in the mail command.
What systems are impacted by CVE-1999-1014?
CVE-1999-1014 impacts systems running Solaris 7.0 and SunOS 5.7.
How does CVE-1999-1014 exploit a buffer overflow?
CVE-1999-1014 exploits a buffer overflow by using a long -m argument in the mail command to execute arbitrary code with elevated privileges.