SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-1999-1123 | SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-01T17:02:53.703Z
Reserved: 2001-08-31T00:00:00
Link: CVE-1999-1142
No data.
Status : Deferred
Published: 1992-05-27T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-1999-1142
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD