CVE-1999-1587: Low severity Sun SunOS vulnerability
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
/usr/ucb/psfrom your environment.If /usr/ucb/ps is not required, remove or uninstall the /usr/ucb/ps binary to eliminate the ability for local users to view environment variables of arbitrary processes via the -e option.
- Configuration
Restrict access to /usr/ucb/ps so that non-privileged local users cannot execute it (for example, change ownership to root and remove world/other execute permissions or set mode to 0700). This prevents use of the -e option to view arbitrary process environment variables.
/usr/ucb/ps file permissions / access = restrict execution to privileged users (e.g., root)
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1587?
CVE-1999-1587 is considered a moderate severity vulnerability due to the exposure of sensitive environment variable information.
How do I fix CVE-1999-1587?
To fix CVE-1999-1587, restrict the use of the /usr/ucb/ps command by modifying user permissions or disabling the -e option.
Who is affected by CVE-1999-1587?
CVE-1999-1587 affects local users on Sun Microsystems Solaris 8 and 9 systems, as well as certain earlier releases.
What is the impact of CVE-1999-1587?
The impact of CVE-1999-1587 allows local users to view the environment variables of arbitrary processes, potentially exposing sensitive information.
Is there a workaround for CVE-1999-1587?
A workaround for CVE-1999-1587 includes restricting access to the /usr/ucb/ps command to trusted users only.