CVE Catalog
CVE-1999-0786
MediumExploitation Probability (EPSS)
Low risk0.56%
42th percentile - higher than 42% of all known CVEs
Summary
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Risk Assessment
An attacker can exploit this vulnerability to overwrite or create files, potentially leading to unauthorized access or data loss.
Recommendation
It is recommended to restrict access to the LD_PROFILE variable and to monitor and control user permissions in Solaris.
Original NVD description (English source)
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.