NetSight
low2.1Public exploit code

CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.8
SunSolaris
Versions 2.5, 2.5.1, 2.6
SunSunos
All versions
Versions 4.0, 5.0, 5.5, 5.5.1

References