Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2001-09-12T04:00:00

Updated: 2024-08-01T19:40:14.542Z

Reserved: 2001-08-31T00:00:00

Link: CVE-1999-1413

cve-icon Vulnrichment

Updated: 2024-08-01T19:40:10.351Z

cve-icon NVD

Status : Modified

Published: 1996-08-03T04:00:00.000

Modified: 2018-10-30T16:26:22.170

Link: CVE-1999-1413

cve-icon Redhat

No data.