CVE Catalog

CVE-1999-1023

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.33%

24th percentile - higher than 24% of all known CVEs

Summary

The useradd command in Solaris 7.0 does not properly interpret certain date formats specified in the '-e' (expiration date) argument, which could allow users to log in after their accounts have expired.

Risk Assessment

The organization may be exposed to unauthorized access to user accounts that should have been disabled, posing a security risk.

Recommendation

It is recommended to update the Solaris system to the latest version to fix this vulnerability and to regularly monitor user accounts.

Original NVD description (English source)

useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS