Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/296 | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=87602167419549&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 1996-08-02 21:00
Updated : 2018-10-30 09:26
NVD link : CVE-1999-1413
Mitre link : CVE-1999-1413
JSON object : View
CWE
Products Affected
sun
- solaris
- sunos