CVE-1999-1426
MediumExploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.
Risk Assessment
Local users can exploit this vulnerability to modify or delete critical system files, potentially leading to serious security issues.
Recommendation
It is recommended to restrict access to NIS database update functions and monitor the use of symbolic links in the system.
Other vulnerabilities in Solaris Solstice AdminSuite 2.1
See all- CVE-1999-1424Medium
Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.
- CVE-1999-1425Medium
Solaris Solstice AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Original NVD description (English source)
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS