← CVE catalog

CVE-1999-1402

Low CVSS 2.1

Published 1997-05-17 ยท last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1402, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.

Sources

CVSS vector: AV:L/AC:L/Au:N/C:N/I:P/A:N