19970517 UNIX domain socket (Solarisx86 2.5)mailing list
http://marc.info/?l=bugtraq&m=87602167418317&w=2 CVE-1999-1402
FreeBSD 3.1 / Solaris 2.6 - Domain Socket
Record summary
CVE-1999-1402 has a selected CVSS score of 2.1; EIP currently links 1 catalogued exploit.
Description
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFreeBSD 3.1 / Solaris 2.6 - Domain SocketExploitDB exploitby Thamer Al-HerbishNot analyzed1 file
References
519971003 Solaris 2.6 and socketsmailing list
http://marc.info/?l=bugtraq&m=87602248718482&w=2 sun-domain-socket-permissions(7172)vdb entry
http://www.iss.net/security_center/static/7172.php 456vdb entry
http://www.securityfocus.com/bid/456 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-1999-1402