CVE-1999-1158 - Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd

Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd

Published Sep 12, 2001

No CVSS score

EPSS 0.84%

Description

Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul
third-party-advisoryx_refsource_AUSCERT
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba
vendor-advisoryx_refsource_SUN
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1139
Advisory

Link	Providers	Tags
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul		third-party-advisoryx_refsource_AUSCERT
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba		vendor-advisoryx_refsource_SUN
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1139		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 12, 2001

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1158

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1158

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 12, 2001

Updated Aug 1, 2024

Link EUVD-1999-1139

GitHub

No data