CVE Vulnerabilities

CVE-1999-1158

Published: May 13, 1997 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.

Affected Software

Name Vendor Start Version End Version
Sunos Sun 5.3 (including) 5.3 (including)
Sunos Sun 5.4 (including) 5.4 (including)
Sunos Sun 5.5 (including) 5.5 (including)
Sunos Sun 5.5.1 (including) 5.5.1 (including)

References