{"cve":"CVE-1999-1080","nvd":{"published":"1995-05-10T04:00:00.000","modified":"2026-06-16T21:49:40.773","status":"Modified","description":"rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://marc.info/?l=bugtraq&m=92633694100270&w=2","http://marc.info/?l=bugtraq&m=93971288323395&w=2","http://www.securityfocus.com/bid/250","https://exchange.xforce.ibmcloud.com/vulnerabilities/8350","http://marc.info/?l=bugtraq&m=92633694100270&w=2"],"products":["sun:sunos"],"source":"nvd","synced_at":"2026-10-19T19:33:01.030757803+00:00"},"epss":{"cve":"CVE-1999-1080","score":0.00349,"percentile":0.28593,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}