CVE-1999-1137 - The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone

The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone

Published Mar 9, 2002

No CVSS score

EPSS 0.40%

Description

The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba
vendor-advisoryx_refsource_SUN
http://www.ciac.org/ciac/bulletins/e-01.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.osvdb.org/6436
vdb-entryx_refsource_OSVDB
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1118
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/549
vdb-entryx_refsource_XF

Link	Providers	Tags
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba		vendor-advisoryx_refsource_SUN
http://www.ciac.org/ciac/bulletins/e-01.shtml		third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.osvdb.org/6436		vdb-entryx_refsource_OSVDB
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1118		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/549		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1137

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1137

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Link EUVD-1999-1118

GitHub

No data