CVE-1999-1027

High

Published: 07/05/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

26th percentile - higher than 26% of all known CVEs

Summary

In Solaris 2.6 HW3/98, the admintool is installed with world-writable permissions, allowing local users to gain privileges by replacing it with a Trojan horse program.

Risk Assessment

The organization is at risk of local users gaining unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to change the permissions of the admintool file to prevent unauthorized users from modifying it.

Other vulnerabilities in admintool

CVE-1999-0135High
The admintool in Solaris allows a local user to write to arbitrary files, potentially leading to root access.

Original NVD description (English source)

Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.