CVE-1999-1424
CVSS 2.0 Score 6.2 of 10 (medium)
Details
Published Nov 10, 1997
Updated: Nov 20, 2024
Summary
CVE-1999-1424 is a vulnerability affecting the Solaris Solstice AdminSuite (AdminSuite) 2.1. This issue arises due to the software's use of unsafe permissions when adding new users to the NIS+ password table. By exploiting this vulnerability, local users can manipulate their password table entries, ultimately leading to unauthorized root access. This poses a significant security risk, as unauthorized root access can enable attackers to compromise the entire system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Sun.