CVE-1999-1554
CVSS 2.0 Score 2.1 of 10 (low)
Details
Summary
CVE-1999-1554 is a vulnerability affecting the Mail software on SGI IRIX 3.3 and 3.3.1 systems. The issue lies in the Mail software's failure to properly set the group ID to the user's group ID, thereby enabling local users to access the mailboxes of other users on the same system. This security weakness can lead to unauthorized access and potential data theft. Local attackers can exploit this vulnerability by manipulating file permissions or using other exploit methods to gain unauthorized access to mailboxes belonging to other users, resulting in a compromise of sensitive information. It is recommended that affected users upgrade their Mail software or apply relevant patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Saskatchewan Government Insurance