CVE Database
/

CVE-1999-1142

Back to search

CVE-1999-1142

Published: Mar 9, 2002

Modified: Aug 1, 2024

PUBLISHED

Description

SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user.

VendorProductVersions

n/a

n/a

affected
n/a

References

CA-1992-11
third-party-advisory
x_refsource_CERT
sun-env(3152)
vdb-entry
x_refsource_XF
00116
vendor-advisory
x_refsource_SUN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now