CVE-1999-1402
Status: ModifiedLow (2.1)—💥 Exploit
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
CVSS
- Version: 2.0
- Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
- Base score: 2.1
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.80%
- Percentile among all scored CVEs: 55
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
💥 Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · FreeBSD 3.1 / Solaris 2.6 - Domain Socket (6/19/1997)
Affected technologies (3)
CWEs
- NVD-CWE-Other
References
- http://marc.info/?l=bugtraq&m=87602167418317&w=2
- http://marc.info/?l=bugtraq&m=87602248718482&w=2
- http://www.iss.net/security_center/static/7172.php
- http://www.securityfocus.com/bid/456
- http://marc.info/?l=bugtraq&m=87602167418317&w=2
- http://marc.info/?l=bugtraq&m=87602248718482&w=2
- http://www.iss.net/security_center/static/7172.php
- http://www.securityfocus.com/bid/456
Raw JSON (NVD)
Show
{
"id": "CVE-1999-1402",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "1997-05-17T04:00:00.000",
"references": [
{
"url": "http://marc.info/?l=bugtraq&m=87602167418317&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=87602248718482&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://www.iss.net/security_center/static/7172.php",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/456",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=87602167418317&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=87602248718482&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.iss.net/security_center/static/7172.php",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/456",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket."
}
],
"lastModified": "2026-06-16T21:50:21.837",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBDDEC3F-52EB-4E1E-84C4-B472600059EC"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EAD7613-A5B3-4621-B981-290C7C6B8BA0"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"
},
{
"criteria": "cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "200D8CB2-0D52-40A8-9CD9-6E4513605201"
},
{
"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54AF87E4-52A4-44CA-B48E-A5BB139E6410"
},
{
"criteria": "cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F66BAF35-A8B9-4E95-B270-444206FDD35B"
},
{
"criteria": "cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34EBF074-78C8-41AF-88F1-DA6726E56F8B"
},
{
"criteria": "cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "369207B4-96FA-4324-9445-98FAE8ECF5DB"
},
{
"criteria": "cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2839042D-7706-4059-B069-72E36297ECEB"
},
{
"criteria": "cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1370216-93EB-400F-9AA6-CB2DC316DAA7"
},
{
"criteria": "cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B72953B-E873-4E44-A3CF-12D770A0D416"
},
{
"criteria": "cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F847DB-65A9-47DA-BCFA-A179E5E2301A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}