CVE-1999-1382

Summary

CVE-1999-1382 is a vulnerability affecting NetWare's NFS (Network File System) implementation in modes 1 and 2. Instead of properly enforcing Unix-style read-only file permissions, NetWare changes the ownership of the file to root when setting the read-only flag. This allows local users to create a setuid (set user ID) program and set it to read-only, effectively making it a setuid root program and enabling them to gain unauthorized root privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.