CVE-1999-1021: NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root ac
Summary
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:30:36.312Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
References
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba
- http://www.cert.org/advisories/CA-1992-15.html
- http://www.securityfocus.com/bid/47
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba
- http://www.cert.org/advisories/CA-1992-15.html
- http://www.securityfocus.com/bid/47
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82