VULNERABILITY INTELLIGENCE
CVE-1999-1585
CVSS score7.2 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published1999-12-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory