NVD

Id
75730  
Name
CVE-1999-1080  
Description
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
1995-05-10  
Modified Date
2016-10-17  
Seq
1999-1080  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
384147 75730 CVE-1999-1080 19990510 SunOS 5.7 rmmount, no nosuid.  View
384148 75730 CVE-1999-1080 19991011  View
384149 75730 CVE-1999-1080 250  View
384150 75730 CVE-1999-1080 solaris-rmmount-gain-root(8350)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64362 JVNDB-1999-000010 Sun Solaris の rmmount における setuid ビットが設定可能な脆弱性 Sun Solaris の rmmount には、man ページでは "always mounted with the nosuid flag set" と記述されているにもかかわらず setuid ビットが設定されてしまい、ある条件下で CD-ROM または フロッピーディスクを挿入し、volcheck コマンドを実行した場合、不正に root 権限を取得される脆弱性が存在します。 CVE-1999-1080 1060 CVE-1999-1080 75730 7.2 http://jvndb.jvn.jp/ja/contents/1999/JVNDB-1999-000010.html 1999-05-10 2007-04-01 View