CVE-1999-1158: Sun Sunos

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.

Affected products

• Sun Sunos: version 5.3 only; version 5.4 only; version 5.5 only; version 5.5.1 only

Published 1997-05-13. Last modified 2026-06-16.