Vulnerability in Sun Solaris

CVE-1999-0786

The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 2.4, 2.5, 2.5.1
Sun Sunos — versions 5.4, 5.5, 5.5.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)