low2.1Public exploit code
CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 7.0 - 'chkperm' Local Privilege Escalation1996-12-05 · local · solaris · Verified
Impact
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.5.1, 2.6, 7.0 |
| Sun | Sunos | All versions Versions 5.5.1, 5.7 |