---
id: CVE-1999-1080
title: >-
  rmmount in SunOS 5.7 may mount file systems without the nosuid flag set,
  contrary to the documentation and its use in previous versions of SunOS, which
  could allow local users with physical access to gain root privileges by
  mounting a fl…
summary: >-
  rmmount in SunOS 5.7 may mount file systems without the nosuid flag set,
  contrary to the documentation and its use in previous versions of SunOS, which
  could allow local users with physical access to gain root privileges by
  mounting a fl…
severity: high
cvss: 7.2
cvssVector: 'AV:L/AC:L/Au:N/C:C/I:C/A:C'
published: '1995-05-10'
updated: '2026-06-16'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-1999-1080'
references:
  - url: 'http://marc.info/?l=bugtraq&m=92633694100270&w=2'
    label: cve@mitre.org
  - url: 'http://marc.info/?l=bugtraq&m=93971288323395&w=2'
    label: cve@mitre.org
  - url: 'http://www.securityfocus.com/bid/250'
    label: cve@mitre.org
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8350'
    label: cve@mitre.org
  - url: 'http://marc.info/?l=bugtraq&m=92633694100270&w=2'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://marc.info/?l=bugtraq&m=93971288323395&w=2'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securityfocus.com/bid/250'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8350'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00349
epssPercentile: 0.25773
ingestedAt: '2026-06-19T03:39:00.754Z'
---

## Overview

rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.