CVE-1999-1424
MediumExploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.
Risk Assessment
The organization may be exposed to unauthorized access to the root account, potentially leading to serious security breaches.
Recommendation
It is recommended to review and adjust permissions in AdminSuite and monitor changes to the NIS+ password table.
Other vulnerabilities in Solaris Solstice AdminSuite 2.1
See all- CVE-1999-1426Medium
Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.
- CVE-1999-1425Medium
Solaris Solstice AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Original NVD description (English source)
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS