medium4.6Public exploit code
CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.6 - Profiling File Creation1999-09-22 · local · solaris · Verified
Impact
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.4, 2.5, 2.5.1, 2.6 |
| Sun | Sunos | All versions Versions 5.4, 5.5, 5.5.1 |