CVE-1999-1142

CVE-1999-1142 describes a privilege escalation vulnerability in SunOS 4.1.2 and earlier. Local users could exploit this by manipulating "LD_*" environment variables when executing dynamically linked setuid/setgid programs like login, su, or sendmail, allowing them to gain elevated privileges. This vulnerability carries a high severity CVSS score of 7.2, indicating a local attack vector with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.