CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=87602167418317&w=2
http://marc.info/?l=bugtraq&m=87602248718482&w=2
http://www.iss.net/security_center/static/7172.php
http://www.securityfocus.com/bid/456	Exploit Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:2.2.2:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.3:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.4:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.5:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.6:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.8:::::::*
	cpe:2.3:o:freebsd:freebsd:3.0:::::::*
	cpe:2.3:o:freebsd:freebsd:3.1:::::::*
	cpe:2.3:o:sun:solaris:2.5::x86:::::
	cpe:2.3:o:sun:solaris:2.5.1::ppc:::::
	cpe:2.3:o:sun:solaris:2.5.1::x86:::::
	cpe:2.3:o:sun:solaris:2.6:::::::*
	cpe:2.3:o:sun:sunos:-:::::::*
	cpe:2.3:o:sun:sunos:4.0:::::::*
	cpe:2.3:o:sun:sunos:5.0:::::::*
	cpe:2.3:o:sun:sunos:5.5:::::::*
	cpe:2.3:o:sun:sunos:5.5.1:::::::*

History

No history.

Information

Published : 1997-05-17 04:00

Updated : 2024-02-04 16:31

NVD link : CVE-1999-1402

Mitre link : CVE-1999-1402

CVE.ORG link : CVE-1999-1402

JSON object : View

Products Affected

sun

sunos
solaris

freebsd

freebsd

CWE

NVD-CWE-Other

{"id": "CVE-1999-1402", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1997-05-17T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=87602167418317&w=2", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=87602248718482&w=2", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/7172.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/456", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket."}], "lastModified": "2018-10-30T16:26:22.357", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "200D8CB2-0D52-40A8-9CD9-6E4513605201"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54AF87E4-52A4-44CA-B48E-A5BB139E6410"}, {"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F66BAF35-A8B9-4E95-B270-444206FDD35B"}, {"criteria": "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34EBF074-78C8-41AF-88F1-DA6726E56F8B"}, {"criteria": "cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "369207B4-96FA-4324-9445-98FAE8ECF5DB"}, {"criteria": "cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2839042D-7706-4059-B069-72E36297ECEB"}, {"criteria": "cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1370216-93EB-400F-9AA6-CB2DC316DAA7"}, {"criteria": "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B72953B-E873-4E44-A3CF-12D770A0D416"}, {"criteria": "cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F847DB-65A9-47DA-BCFA-A179E5E2301A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}