CVE-1999-1584: Sun Openwindows

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.

Affected products

• Sun Openwindows: version 3.0 only
• Sun Sunos: version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.3c only

Published 1999-12-31. Last modified 2026-06-16.