CVE-1999-1413

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1996-08-03 · updated 2026-06-16

Description

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.

Affected products

Sun Solaris: 2.4
Sunos: 5.4

References

http://marc.info/?l=bugtraq&m=87602167419549&w=2
http://www.securityfocus.com/bid/296
http://marc.info/?l=bugtraq&m=87602167419549&w=2
http://www.securityfocus.com/bid/296

Get alerted when CVE-1999-1413 or the next vulnerability affects your stack