---
id: CVE-1999-1137
title: >-
  The permissions for the /dev/audio device on Solaris 2.2 and earlier, and
  SunOS 4.1.x, allow any local user to read from the device, which could be used
  by an attacker to monitor conversations happening near a machine that has a
  microphone.
summary: >-
  The permissions for the /dev/audio device on Solaris 2.2 and earlier, and
  SunOS 4.1.x, allow any local user to read from the device, which could be used
  by an attacker to monitor conversations happening near a machine that has a
  microphone.
severity: low
cvss: 2.1
cvssVector: 'AV:L/AC:L/Au:N/C:P/I:N/A:N'
published: '1993-10-01'
updated: '2026-06-16'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-1999-1137'
references:
  - url: >-
      http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba
    label: cve@mitre.org
  - url: 'http://www.ciac.org/ciac/bulletins/e-01.shtml'
    label: cve@mitre.org
  - url: 'http://www.osvdb.org/6436'
    label: cve@mitre.org
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/549'
    label: cve@mitre.org
  - url: >-
      http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.ciac.org/ciac/bulletins/e-01.shtml'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.osvdb.org/6436'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://exchange.xforce.ibmcloud.com/vulnerabilities/549'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00399
epssPercentile: 0.31315
ingestedAt: '2026-06-19T03:39:00.723Z'
---

## Overview

The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.