Solaris Coredump Vulnerbility

BID:296

Info

Solaris Coredump Vulnerbility

Bugtraq ID: 296
Class: Access Validation Error
CVE: CVE-1999-1413
Remote: No
Local: Yes
Published: Aug 03 1996 12:00AM
Updated: Jul 11 2009 12:16AM
Credit: This vulnerabilty was posted to the Bugtraq mailing list by Jungseok Roh <[email protected]> Sat, 3 Aug 1996.
Vulnerable: Sun Solaris 2.4_x86
Sun Solaris 2.4
Not Vulnerable: Sun Solaris 2.5.1 _x86
Sun Solaris 2.5.1 _ppc
Sun Solaris 2.5.1
Sun Solaris 7.0_x86
Sun Solaris 7.0
Sun Solaris 2.6
Sun Solaris 2.5_x86
Sun Solaris 2.5

Solution / Fix

Solaris Coredump Vulnerbility

Solution:
On Solaris 2.4 systems with kernel jumbo patch -35 or later set-gid programs will not core dump, unless you're in the group the program is set-gid too. Later revisions of Solaris (2.5 and up) are not thought to be vulnerable to this problem.

Patches are available to all Sun customers at http://sunsolve.sun.com


Sun Solaris 2.4_x86

Sun Solaris 2.4

References

Solaris Coredump Vulnerbility

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report