CVE-1999-1158: Buffer Overflow
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unixscheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
If possible, disable the vulnerable PAM and unix_scheme authentication modules on affected SunOS systems to prevent local privilege escalation via these modules until a vendor patch is available.
SunOS pluggable authentication module (PAM) / unix_scheme module_enabled = false - Configuration
Remove the setuid-root permission from programs that use the vulnerable modules (passwd, yppasswd, nispasswd) or otherwise prevent unprivileged users from executing them until a vendor fix is applied.
passwd, yppasswd, nispasswd setuid_bit = removed - Compensating control
Restrict local access to systems and to accounts that could execute the affected programs; limit which users can run passwd/yppasswd/nispasswd (for example via filesystem permissions or access control lists) until an official patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1158?
CVE-1999-1158 is considered a critical vulnerability as it allows local users to gain root privileges on affected Solaris systems.
How do I fix CVE-1999-1158?
To fix CVE-1999-1158, apply the appropriate patches provided by Sun Microsystems for your version of Solaris.
Which versions of Solaris are affected by CVE-1999-1158?
CVE-1999-1158 affects Solaris 2.3, 2.4, 2.5, 2.5.1, and 2.5.1 systems.
What types of programs are vulnerable due to CVE-1999-1158?
Programs such as passwd, yppasswd, and nispasswd are vulnerable due to CVE-1999-1158.
Can CVE-1999-1158 affect remote users?
No, CVE-1999-1158 is a local vulnerability, meaning only local users can exploit it.