CVE-1999-1026: High severity Sun Solaris vulnerability
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
aspppdfrom your environment.Uninstall the aspppd daemon if it is not required to eliminate the vulnerable component.
- Configuration
Stop and disable the aspppd daemon on affected systems until a vendor-supplied fix is available.
aspppd (Solaris 2.5 x86) service_enabled = false - Configuration
Ensure /tmp/.asppp.fifo is not a symlink and is created/owned by root with restrictive permissions so unprivileged users cannot replace it. If the FIFO exists and is replaceable by unprivileged users, remove and recreate it securely or prevent its creation in world-writable locations.
/tmp/.asppp.fifo symlink/ownership/permissions = not a symlink; owned by root; not writable by unprivileged users
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1026?
CVE-1999-1026 is considered a high severity vulnerability due to the ability for local users to gain root privileges.
How do I fix CVE-1999-1026?
To fix CVE-1999-1026, ensure that the /tmp/.asppp.fifo file cannot be modified by unprivileged users.
What systems are affected by CVE-1999-1026?
CVE-1999-1026 affects Solaris versions 2.4, 2.5, and 2.5.1 running on x86 architecture.
What type of attack does CVE-1999-1026 involve?
CVE-1999-1026 involves a symlink attack that allows local users to exploit the system.
Can CVE-1999-1026 be exploited remotely?
CVE-1999-1026 cannot be exploited remotely as it requires local user access.