Vulnerability in Freebsd

CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

EPSS: 0.008 (53.0th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 2.2.2, 2.2.3, 2.2.4
  • Sun Solaris — versions 2.5, 2.5.1, 2.6
  • Sun Sunos — versions 4.0, 5.0, 5.5
  • N/a — versions n/a

References