/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.

SunOS 5.9_x86: ps cmd patch.
Date this patch was last updated by Sun : Mar/24/06

SunOS 5.9: ps cmd patch.
Date this patch was last updated by Sun : Mar/24/06

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: 'ps' command line utility). The supported version that is affected is 8. Very difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

ID	Name	Product	Family	Severity
21173	Solaris 9 (x86) : 120239-01	Nessus	Solaris Local Security Checks	low
21172	Solaris 9 (sparc) : 120240-01	Nessus	Solaris Local Security Checks	low
21171	Solaris 8 (x86) : 109024-08	Nessus	Solaris Local Security Checks	medium
21170	Solaris 8 (sparc) : 109023-08	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-1999-1587

medium

Tenable Plugins

low

low

medium

medium