CVE-1999-1080 json
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of…
published 1995-05-10 31 y ago modified 2026-06-16 4 mo ago also EUVD-1999-1061
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 28%
- public exploits
- 0
- none known
Summary
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Exploit prediction
0.35% chance of exploitation in the next 30 days, higher than 28% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
-
marc.info
/?l=bugtraq&m=92633694100270&w=2
mailing-list
-
securityfocus.com
/bid/250
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/8350
vdb-entry
-
marc.info
/?l=bugtraq&m=93971288323395&w=2
mailing-list
Sources
- CVE List CVE-1999-1080
- NVD CVE-1999-1080
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.