CVE-1999-0555

CVSS 2.0 Score 10.0 of 10 (high)

Details

Published Jan 1, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0555 is a vulnerability affecting Unix systems where an account with a name other than "root" can still hold UID 0, granting it full root privileges. This misconfiguration can lead to unauthorized access and potential system compromise, making it a significant security risk. Hackers can exploit this vulnerability by simply guessing or gaining knowledge of an account name with root privileges, bypassing the common security assumption that only the "root" account holds such access. System administrators must ensure that only legitimate "root" accounts exist, and properly secure and manage user accounts to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share