medium4.6Public exploit code
CVE-1999-1413
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 7.0 - 'Coredump' File Write1996-08-03 · remote · solaris · Verified
Impact
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Version 2.4 |
| Sun | Sunos | Version 5.4 |