CVE-1999-1424

CVSS 2.0 Score 6.2 of 10 (medium)

Details

Published Nov 10, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-1424 is a vulnerability affecting the Solaris Solstice AdminSuite (AdminSuite) 2.1. This issue arises due to the software's use of unsafe permissions when adding new users to the NIS+ password table. By exploiting this vulnerability, local users can manipulate their password table entries, ultimately leading to unauthorized root access. This poses a significant security risk, as unauthorized root access can enable attackers to compromise the entire system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share