Vulnerability Details : CVE-1999-1142
SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user.
Exploit prediction scoring system (EPSS) score for CVE-1999-1142
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 24 % EPSS Score History EPSS FAQ
CVSS scores for CVE-1999-1142
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-1999-1142
-
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116
-
http://www.cert.org/advisories/CA-1992-11.html
Patch;Third Party Advisory;US Government Resource
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/3152
Products affected by CVE-1999-1142
- cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*