CVE-1999-1426

Medium

Published: 10/11/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.

Risk Assessment

Local users can exploit this vulnerability to modify or delete critical system files, potentially leading to serious security issues.

Recommendation

It is recommended to restrict access to NIS database update functions and monitor the use of symbolic links in the system.

Original NVD description (English source)

Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.