CVE-1999-1023
MediumExploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The useradd command in Solaris 7.0 does not properly interpret certain date formats specified in the '-e' (expiration date) argument, which could allow users to log in after their accounts have expired.
Risk Assessment
The organization may be exposed to unauthorized access to user accounts that should have been disabled, posing a security risk.
Recommendation
It is recommended to update the Solaris system to the latest version to fix this vulnerability and to regularly monitor user accounts.
Other vulnerabilities in Solaris 7.0
See all- CVE-1999-1014Medium
Buffer overflow in the mail command in Solaris 2.7 allows local users to gain privileges via a long -m argument.
- CVE-1999-0676Medium
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
- CVE-1999-0188High
The passwd command in Solaris can be subjected to a denial of service attack.
- CVE-1999-1118Low
The vulnerability in ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
- CVE-1999-0295High
The sysdef command in Solaris allows local users to read kernel memory, potentially leading to root privileges.
- CVE-1999-1413Medium
In Solaris 2.4 before kernel jumbo patch -35, set-gid programs can dump core even if the real user id is not in the set-gid group. This allows local users to overwrite or create files with higher privileges.
Original NVD description (English source)
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS