CVE-1999-1192: Buffer Overflow
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS eepromfrom your environment.If the eeprom utility is not required on the system, remove or uninstall the eeprom binary to eliminate the local privilege escalation vector.
- Configuration
Change ownership and permissions of the eeprom binary so that only the root account (or designated administrators) can execute it; remove execute permission for unprivileged users.
SunOS (eeprom) executable permissions = restrict execution to root only / remove execute permission for non-privileged users - Compensating control
Restrict local account access and administrative privileges: limit which users can log in or run administrative commands, audit local accounts, and ensure untrusted users cannot access or execute privileged system utilities such as eeprom.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1192?
CVE-1999-1192 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1192?
Fixing CVE-1999-1192 involves applying the latest patches provided by the vendor for Solaris versions affected.
Which versions of Solaris are affected by CVE-1999-1192?
CVE-1999-1192 affects Solaris versions 5.3, 5.4, and 5.5 as well as earlier versions.
What type of vulnerability is CVE-1999-1192?
CVE-1999-1192 is a buffer overflow vulnerability.
Can remote users exploit CVE-1999-1192?
No, CVE-1999-1192 can only be exploited by local users.