CVE-1999-1438: High severity Sun SunOS vulnerability
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS /bin/mailfrom your environment.If mail functionality provided by /bin/mail is not required on the system, uninstall or remove the /bin/mail binary to eliminate the vulnerable component.
- Configuration
Remove the setuid bit (if present) and change file permissions on /bin/mail so that only root can execute it (e.g., chmod 700 /bin/mail or equivalent).
SunOS /bin/mail file permissions = remove setuid; restrict execute to root - Compensating control
Prevent unprivileged local users from executing the vulnerable binary by restricting shell/login access and using host-based access controls (local ACLs, sudoers restrictions, or similar) to limit which accounts can run /bin/mail; isolate or limit access to affected hosts to trusted administrators until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1438?
CVE-1999-1438 is considered to be a critical vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1438?
To mitigate CVE-1999-1438, upgrade to a patched version of SunOS that addresses this vulnerability.
Which versions of SunOS are affected by CVE-1999-1438?
CVE-1999-1438 affects SunOS versions 4.1.1 and earlier, including 4.0.3.
Is CVE-1999-1438 a local or remote exploitation vulnerability?
CVE-1999-1438 is a local exploitation vulnerability, meaning it requires local access to the system to be exploited.
Can CVE-1999-1438 be exploited by non-privileged users?
Yes, CVE-1999-1438 can be exploited by non-privileged local users to gain root privileges.