| Vulnerability Name: | CVE-1999-1014 (CCN-3297) | ||||||||
| Assigned: | 1999-09-12 | ||||||||
| Published: | 1999-09-12 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Mon, 13 Sep 1999 11:22:14 -0500 Solaris 2.7 /usr/bin/mail Source: CCN Type: BugTraq Mailing List, Mon, 27 Sep 1999 10:11:16 MDT Working Solaris x86 /usr/bin/mail exploit Source: MITRE Type: CNA CVE-1999-1014 Source: BUGTRAQ Type: UNKNOWN 19990913 Solaris 2.7 /usr/bin/mail Source: BUGTRAQ Type: UNKNOWN 19990927 Working Solaris x86 /usr/bin/mail exploit Source: CCN Type: OSVDB ID: 1088 Solaris /usr/bin/mail -m Local Overflow Source: BID Type: Exploit, Patch, Vendor Advisory 672 Source: CCN Type: BID-672 Solaris /usr/bin/mail -m Local Buffer Overflow Vulnerability Source: XF Type: UNKNOWN sun-usrbinmail-local-bo(3297) Source: XF Type: UNKNOWN sun-usrbinmail-local-bo(3297) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||