low2.1Public exploit code
CVE-1999-1402
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD 3.1 / Solaris 2.6 - Domain Socket1997-06-19 · local · freebsd · Verified
Impact
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Versions 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.8 |
| Sun | Solaris | Versions 2.5, 2.5.1, 2.6 |
| Sun | Sunos | All versions Versions 4.0, 5.0, 5.5, 5.5.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=87602167418317&w=2
- http://marc.info/?l=bugtraq&m=87602248718482&w=2
- http://www.iss.net/security_center/static/7172.php
- http://www.securityfocus.com/bid/456
- http://marc.info/?l=bugtraq&m=87602167418317&w=2
- http://marc.info/?l=bugtraq&m=87602248718482&w=2
- http://www.iss.net/security_center/static/7172.php
- http://www.securityfocus.com/bid/456