CVE-1999-1122: Medium severity Sun SunOS vulnerability
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS/restorefrom your environment.If the 'restore' utility is not required, remove or disable it on affected SunOS systems (SunOS 4.0.3 and earlier) to eliminate the local privilege escalation vector.
- Configuration
On SunOS systems (SunOS 4.0.3 and earlier), change ownership and filesystem permissions for the 'restore' binary to prevent non-administrative local users from executing it (for example, chown root:root and remove execute bits for group/other) until an official vendor fix is available.
SunOS restore utility file execution permissions / accessibility = restrict execution to administrative accounts (remove execute for non-admins) - Compensating control
Restrict and monitor local account access on affected hosts (SunOS 4.0.3 and earlier): limit which users can log in or execute administrative binaries, isolate affected systems from sensitive networks, and enable host-level monitoring/logging to detect attempted privilege escalation until a vendor-supplied patch or fixed version is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1122?
CVE-1999-1122 is considered a critical vulnerability that allows local users to gain elevated privileges.
How do I fix CVE-1999-1122?
To remediate CVE-1999-1122, users should upgrade to a version of SunOS that is not affected, specifically after 4.0.3.
What systems are affected by CVE-1999-1122?
CVE-1999-1122 affects SunOS versions 4.0.3 and earlier.
Who is impacted by CVE-1999-1122?
Local users on affected systems can exploit CVE-1999-1122 to gain unauthorized privileges.
What type of vulnerability is CVE-1999-1122?
CVE-1999-1122 is a local privilege escalation vulnerability.