Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2001-09-12T04:00:00
Updated: 2024-08-01T19:40:14.542Z
Reserved: 2001-08-31T00:00:00
Link: CVE-1999-1413
Vulnrichment
Updated: 2024-08-01T19:40:10.351Z
NVD
Status : Modified
Published: 1996-08-03T04:00:00.000
Modified: 2024-11-20T23:31:03.367
Link: CVE-1999-1413
Redhat
No data.