CVE-1999-1585: High severity Sun SunOS vulnerability
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the rcS and mountall startup scripts so they do not start a privileged shell on the system console if fsck fails during boot. Instead halt the boot or require administrator intervention via a secure channel.
rcS and mountall (SunOS/Solaris 2.x) spawn_privileged_shell_on_fsck_failure = disabled - Compensating control
Restrict physical access to the machine and its system console (lock server rooms, limit console access to trusted personnel, use physical security controls) to prevent attackers with physical access from reaching the console.
- Operational
Run fsck and repair filesystem errors before rebooting systems; ensure automated fsck will not fail unattended during boot and monitor boots so manual recovery can be performed if fsck would fail.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1585?
CVE-1999-1585 is considered a critical vulnerability due to the potential for local attackers with physical access to gain root privileges.
How do I fix CVE-1999-1585?
To fix CVE-1999-1585, ensure to upgrade to a patched version of Sun Solaris that addresses this issue.
What programs are affected by CVE-1999-1585?
The affected programs are rcS and mountall in Sun Solaris 2.x, particularly versions before 2.4.
Can CVE-1999-1585 be exploited remotely?
CVE-1999-1585 requires physical access to the machine to exploit, making it a local privilege escalation vulnerability.
What systems are vulnerable to CVE-1999-1585?
Systems running Sun Solaris 2.x, before version 2.4, are vulnerable to CVE-1999-1585.