Vulnerability in Sun Openwindows

CVE-1999-1584

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.

EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.

Affected products

Sun Openwindows — versions 3.0
Sun Sunos — versions 4.1.1, 4.1.2, 4.1.3
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, Patch, x_refsource_SUN, Vendor Advisory)
cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)