CVE-1999-1371: Buffer Overflow
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS /usr/bin/writefrom your environment.If the write utility is not required, remove or uninstall /usr/bin/write from affected systems to eliminate the vulnerable binary.
- Configuration
Remove the setuid bit from /usr/bin/write (for example: chmod u-s /usr/bin/write) to prevent local users from gaining elevated privileges via this binary.
SunOS /usr/bin/write setuid_bit = removed - Compensating control
Restrict local user access: disable or remove unnecessary local accounts and limit administrative access to trusted users to reduce exposure to local privilege escalation.
- Operational
Audit systems for signs of exploitation (unexpected root activity, modified system files, suspicious logins). If compromise is suspected, isolate the host and rebuild from known-good media; investigate and remediate any unauthorized changes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1371?
CVE-1999-1371 is a critical vulnerability that allows local users to execute code with elevated privileges.
How do I fix CVE-1999-1371?
To mitigate CVE-1999-1371, users should apply the latest security patches provided by Sun Microsystems or upgrade to a more secure version.
What systems are affected by CVE-1999-1371?
CVE-1999-1371 affects Solaris 2.6 and Solaris 7 as well as other versions of SunOS.
Who can exploit CVE-1999-1371?
CVE-1999-1371 can be exploited by any local user who has access to the system with the vulnerable configurations.
What makes CVE-1999-1371 dangerous?
CVE-1999-1371 is dangerous because it allows unauthorized privilege escalation, potentially compromising the entire system.