CVE Catalog

CVE-1999-1424

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.

Risk Assessment

The organization may be exposed to unauthorized access to the root account, potentially leading to serious security breaches.

Recommendation

It is recommended to review and adjust permissions in AdminSuite and monitor changes to the NIS+ password table.

Original NVD description (English source)

Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS