CVE-1999-1080: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in pr
Summary
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Why It Matters
UNKNOWN severity with CVSS n/a.
Current Status
- Vulnerability status: Not listed in CISA KEV
- Last intelligence update: 2026-08-21 · source: NVD
Entity Activity Timeline
- 2026-08-21 — Intelligence record updated（NVD sync）
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:30:36.665Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
Sources & Evidence
- http://marc.info/?l=bugtraq&m=92633694100270&w=2
- http://marc.info/?l=bugtraq&m=93971288323395&w=2
- http://www.securityfocus.com/bid/250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350
- http://marc.info/?l=bugtraq&m=92633694100270&w=2
- http://marc.info/?l=bugtraq&m=93971288323395&w=2
- http://www.securityfocus.com/bid/250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8350
Start Investigation
Move from reading to investigating CVE-1999-1080: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in pr. The workspace is a structured analysis surface — not a chat — organised as:
- Question — what do you need to know about CVE-1999-1080: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in pr?
- Evidence — assertions mapped to verifiable references.
- Timeline — events in chronological order.
- Related Entities — CVE, threat actor, campaign, malware links.
- Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
- Notes — your own observations and working hypotheses.
AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.
Recommended Tools
- CVE LookupOpen the full CVE record — severity, CVSS, affected products, CISA KEV and references.Open CVE record
Every tool runs passively or locally — inputs are never stored and no target is scanned.Start an investigation on this entity →