CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

Affected products

Solaris, Sunos

Freebsd

= 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.8, 3.0, 3.1

Sun Solaris

= 2.5, 2.5.1, 2.6

Sun Sunos

All versions

CVSS 2.0

2.1 LOW

EPSS

0.8% (54th percentile)

NVD status

Modified

Published

2002-03-09