VulnerabilityNVD
8.4 — CRITICAL
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A local privilege escalation vulnerability (CVE-1999-0084) exists in certain NFS servers, allowing attackers to gain elevated privileges by creating a writable kmem device and setting the UID to 0. This vulnerability is considered high-severity due to its potential impact on system security.
⚙️Technical Details
💥Impact Assessment
Severity: H
Who Is at Risk
Users with access to NFS servers and administrators of affected systems are at risk.
🛡️Recommended Actions
1Implement strict file system permissions and access controls for NFS servers.
2Regularly update and patch affected systems with the latest security patches.
3Monitor system logs for suspicious activity related to kmem device creation.
📦Affected Products
Sun Nfs
🔐NVD Verified DataVERIFIED
CVE-1999-0084 ↗CVSS 8.4 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-269
Affected Products (CPE)
Sun Nfs
Read the full article
This is a curated summary. The complete article is available at NVD.