CVE-1999-1193

CVSS 2.0 Score 10 of 10 (high)

Details

Published May 14, 1991
Updated: Nov 20, 2024

Summary

CVE-1999-1193 is a vulnerability affecting NeXT NeXTstep 2.1 and earlier versions. This issue grants the "me" user wheel group privileges, enabling them to execute the su command and thereby gain root access to the system. This represents a significant security risk, as the "me" user typically has minimal privileges, and unauthorized root access can lead to serious consequences including data theft or system damage. Users running these affected NeXTstep versions should apply the necessary patches or updates to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share