CVE-1999-0952: Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.

Security readout for executives and security teams

This is an old local privilege-escalation issue in Solaris lpstat. A user who already has local access could abuse a buffer overflow in the class argument to gain root privileges. The bundle does not provide CVSS, CWE, patch, or active exploitation evidence. Likely exposure is limited to legacy Solaris 2.6/2.7 systems where local users can run lpstat. Modern estates are exposed only if they still operate these obsolete Solaris hosts or embedded dependencies retaining the vulnerable binary. Treat this as high priority only where legacy Solaris remains in service. It is not an internet-facing remote issue, but root compromise from a local account can defeat host controls and enable broader operational impact. Mitigation focus: Check Sun/Oracle archival guidance for the relevant Solaris release and lpstat package.; Apply the vendor-supported patch or upgrade path if one is available.; Restrict local shell access on affected Solaris hosts to trusted administrators..

Prepared

Jul 12, 2026, 06:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.