Vulnerability Description
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Sunos | 5.0 |
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1PatchVendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1PatchVendor Advisory
FAQ
What is CVE-1999-1585?
CVE-1999-1585 is a vulnerability with a CVSS score of 7.2 (HIGH). The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with phy...
How severe is CVE-1999-1585?
CVE-1999-1585 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1585?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Sunos.