CVE-1999-1080
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Affected
- sun/sunos
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=92633694100270&w=2
- http://marc.info/?l=bugtraq&m=93971288323395&w=2
- http://www.securityfocus.com/bid/250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350
- http://marc.info/?l=bugtraq&m=92633694100270&w=2
- http://marc.info/?l=bugtraq&m=93971288323395&w=2
- http://www.securityfocus.com/bid/250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.