Vulnerabilities > CVE-1999-1402

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
freebsd
sun
exploit available
NVD
Published: 1997-05-17
Updated: 2018-10-30

Summary

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

Vulnerable Configurations

Part Description Count
OS
Freebsd
8
OS
Sun
9

Exploit-Db

descriptionFreeBSD 3.1,Solaris 2.6 Domain Socket Vulnerability. CVE-1999-1402. Local exploit for freebsd platform
idEDB-ID:19346
last seen2016-02-02
modified1997-06-19
published1997-06-19
reporterThamer Al-Herbish
sourcehttps://www.exploit-db.com/download/19346/
titleFreeBSD <= 3.1,Solaris <= 2.6 Domain Socket Vulnerability

References