CVE-1999-1021: High severity Sun SunOS vulnerability

Published Dec 30, 1992

Updated

NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.

Affected Software

3 affected components

Sun SunOS=4.1

Sun SunOS=4.1.1

Sun SunOS=4.1.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SunOS to a version that resolves this vulnerability.
Patch NFS jumbo patch upgrade

Event History

Dec 30, 1992

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-1021?

CVE-1999-1021 is a high severity vulnerability that allows local users to gain root access.

How do I fix CVE-1999-1021?

To fix CVE-1999-1021, apply the NFS jumbo patch upgrade which mitigates the vulnerability.

Who is affected by CVE-1999-1021?

CVE-1999-1021 affects users of SunOS versions 4.1, 4.1.1, and 4.1.2.

What are the consequences of exploiting CVE-1999-1021?

Exploitation of CVE-1999-1021 can lead to unauthorized root access, compromising system security.

Is CVE-1999-1021 still a threat today?

CVE-1999-1021 primarily affects outdated systems, but if still in use, it poses a significant threat.