CVE-1999-1423: ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request...

Security readout for executives and security teams

This is an old Solaris denial-of-service issue in the ping utility. A local user on Solaris 2.3 through 2.6 could trigger a system crash using multicast traffic through loopback. The business concern is limited to legacy Solaris estates; it is not described as data theft or remote code execution. Exposure is likely limited to systems still running Solaris 2.3, 2.4, 2.5, or 2.6 with local user access. Modern environments are unlikely to be affected unless legacy Solaris hosts remain in production, labs, or embedded operational systems. Treat this as a legacy-risk cleanup item unless affected Solaris systems remain business-critical. If such hosts exist, prioritize isolation, access reduction, and migration because a local user could crash the system and disrupt availability. Mitigation focus: Identify and retire unsupported Solaris 2.3 through 2.6 systems where possible.; Check archived Sun advisory guidance for vendor patch or workaround details.; Restrict interactive local access on any remaining affected Solaris hosts..

Prepared

Jul 1, 2026, 08:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.