CVE-1999-1425

Summary

CVE-1999-1425 is a vulnerability affecting Solaris Solstice AdminSuite (AdminSuite) version 2.1. The issue arises due to the incorrect file permission setting. Specifically, AdminSuite incorrectly grants write access to source files for NIS maps located in the /etc directory. Malicious local users can exploit this flaw to modify the /etc/passwd file, thereby gaining elevated privileges. This vulnerability poses a significant security risk and should be addressed promptly by updating to a patched version of Solaris Solstice AdminSuite.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.