CVE-1999-1413

Summary

CVE-1999-1413 is a vulnerability affecting Solaris 2.4 before the kernel jumbo patch -35. This issue permits set-gid programs to generate core dumps even if the real user ID is not part of the set-gid group. Consequently, local users can manipulate files with higher privileges by leveraging this core dump functionality, for instance, through the dmesg utility. This vulnerability poses a significant risk, as it allows unintended access to sensitive data or system modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.