CVE-1999-0860: Sun Solaris

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.

Affected products

• Sun Solaris: version 2.5.1 only; version 2.6 only; version 7.0 only
• Sun Sunos: affected versions not specified; version 5.5.1 only; version 5.7 only

Published 1999-12-01. Last modified 2026-06-16.