high7.2Public exploit code
CVE-1999-1191
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.5.1 - 'chkey' Local Privilege Escalation1997-05-19 · local · solaris · Verified
- Solaris 2.5.0/2.5.1 ps / chkey - Data Buffer1997-05-19 · local · solaris · Verified
Impact
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.4, 2.5, 2.5.1 |
| Sun | Sunos | through 5.5.1 Versions 5.4, 5.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=87602167418335&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144
- http://www.iss.net/security_center/static/7442.php
- http://www.securityfocus.com/bid/207
- http://marc.info/?l=bugtraq&m=87602167418335&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144
- http://www.iss.net/security_center/static/7442.php
- http://www.securityfocus.com/bid/207