CVE-1999-1027: High severity Sun Solaris vulnerability
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
admintool (Oracle Solaris)from your environment.Uninstall or remove admintool if it is not required on the system.
- Configuration
Remove the world-writable permission from the admintool executable (for example: chmod o-w /path/to/admintool) so it cannot be replaced by local users.
admintool (Oracle Solaris) file_permissions = remove world-writable bit - Compensating control
Restrict write access to the directory containing admintool to trusted administrator accounts (use filesystem ownership/permissions or ACLs) to prevent local users from modifying system binaries.
- Operational
Check whether admintool has been replaced by a Trojan; if compromised, restore the binary from a trusted backup or installation media and perform a system integrity review and audit of local accounts and logs for signs of exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1027?
CVE-1999-1027 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-1999-1027?
To fix CVE-1999-1027, you should change the permissions of the admintool to restrict access, ensuring it is not world-writable.
What versions of Solaris are affected by CVE-1999-1027?
CVE-1999-1027 specifically affects Solaris version 2.6.
Can remote users exploit CVE-1999-1027?
No, CVE-1999-1027 can only be exploited by local users who have access to the system.
What can happen if CVE-1999-1027 is exploited?
If CVE-1999-1027 is exploited, a local user could replace admintool with a malicious version, allowing them to execute arbitrary code with elevated privileges.