Beveiligingsadvies

CVE-1999-1413

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2001-09-12 04:00:00
Laatst bijgewerkt 2024-08-01 19:40:14
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.