CVE-1999-1554

CVSS 2.0 Score 2.1 of 10 (low)

Details

Published Oct 31, 1990
Updated: Nov 20, 2024

Summary

CVE-1999-1554 is a vulnerability affecting the Mail software on SGI IRIX 3.3 and 3.3.1 systems. The issue lies in the Mail software's failure to properly set the group ID to the user's group ID, thereby enabling local users to access the mailboxes of other users on the same system. This security weakness can lead to unauthorized access and potential data theft. Local attackers can exploit this vulnerability by manipulating file permissions or using other exploit methods to gain unauthorized access to mailboxes belonging to other users, resulting in a compromise of sensitive information. It is recommended that affected users upgrade their Mail software or apply relevant patches to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share