CVE-1999-1413
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 0.7%
from disclosure to weapon0 days
Published on NVDSep 12
1st PoCAug 3
exploitation probability
0.7%top 49% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/19236⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.