Vulnerability in Sun Solaris

CVE-1999-1413

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.

EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 2.4
Sun Sunos — versions 5.4
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)