CVE-1999-1425
MediumExploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Solaris Solstice AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Risk Assessment
Local users may gain unauthorized privileges, posing a serious security threat to the system.
Recommendation
It is recommended to review and correct the permission settings for NIS source files to prevent unauthorized modifications.
Other vulnerabilities in Solaris Solstice AdminSuite 2.1
See all- CVE-1999-1424Medium
Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.
- CVE-1999-1426Medium
Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.
Original NVD description (English source)
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS