First published: Mon May 19 1997(Updated: )
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris and Zettabyte File System (ZFS) | =2.4 | |
Oracle Solaris and Zettabyte File System (ZFS) | =2.5.1 | |
Oracle Solaris and Zettabyte File System (ZFS) | =2.5 | |
Sun SunOS | =5.5 | |
Sun SunOS | =5.4 | |
Sun SunOS | <=5.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1191 is classified as a critical vulnerability due to its ability to allow local users to gain root privileges.
To fix CVE-1999-1191, apply the latest patches provided by Sun Microsystems for Solaris 2.5.1 and earlier.
CVE-1999-1191 affects Solaris versions 2.4, 2.5, and 2.5.1 as well as SunOS versions 5.4 and 5.5.
Local users with access to the affected Solaris and SunOS systems can exploit CVE-1999-1191 to gain unauthorized root access.
CVE-1999-1191 is a buffer overflow vulnerability that can be exploited via long command line arguments.