CVE Catalog

CVE-1999-1428

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

19th percentile - higher than 19% of all known CVEs

Summary

Solaris Solstice AdminSuite versions 2.1 and 2.2 allow local users to gain elevated privileges via the save option in the Database Manager, which is running with setgid bin privileges.

Risk Assessment

This vulnerability could lead to unauthorized system access and privilege escalation, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade to the latest version of Solaris Solstice AdminSuite and restrict access to the Database Manager for local users.

Original NVD description (English source)

Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS