CVE-1999-1295
MediumExploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Transarc DCE Distributed File System (DFS) version 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups. This could allow those users to gain access to resources protected by DFS.
Risk Assessment
Users may gain unauthorized access to resources, posing a risk of data security breaches within the organization.
Recommendation
It is recommended to upgrade to a newer version of DFS that correctly handles grouplist initialization to minimize the risk of unauthorized access.
Original NVD description (English source)
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.