Vulnerability in Sun Sunos

CVE-1999-1585

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

Affected products

  • Sun Sunos — versions 5.0
  • N/a — versions n/a

References

  • cve@mitre.org (vendor-advisory, Patch, x_refsource_SUN, Vendor Advisory)