CVE-1999-1587

Solaris <9 - Info Disclosure

Title source: llm

Description

/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Marco Ivaldi · bashlocalsolaris

https://www.exploit-db.com/exploits/2242

View Code ZIP pw:eip

References (9)

[Patch, Vendor Advisory] http://secunia.com/advisories/19426

[Patch] http://securitytracker.com/id?1015833

[Exploit, Patch] http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1

[Third Party Advisory, VDB Entry] http://www.osvdb.org/24200

[Exploit] http://www.sunmanagers.org/archives/1996/1383.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/25460

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/19662

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1470

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/1123

Scores

EPSS 0.0064

EPSS Percentile 70.7%

Details

Status published

Products (2)

sun/solaris 9.0

sun/sunos 5.8

Published Dec 31, 1999

Tracked Since Feb 18, 2026