high7.2Public exploit code
CVE-1999-1123
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SunOS 4.1.1 - '/usr/release/bin/winstall' Local Privilege Escalation1999-11-12 · local · aix · Verified
- SunOS 4.1.1 - '/usr/release/bin/makeinstall' Local Privilege Escalation1999-11-23 · local · solaris · Verified
Impact
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Sunos | Versions 4.0.3, 4.1, 4.1.1 |
References
- NVD record
- CVE.org record
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba
- http://www.cert.org/advisories/CA-1991-07.html
- http://www.securityfocus.com/bid/21
- http://www.securityfocus.com/bid/22
- https://exchange.xforce.ibmcloud.com/vulnerabilities/582
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba
- http://www.cert.org/advisories/CA-1991-07.html
- http://www.securityfocus.com/bid/21
- http://www.securityfocus.com/bid/22
- https://exchange.xforce.ibmcloud.com/vulnerabilities/582