Vulnerability in Sun Solstice Adminsuite

CVE-1999-1424

Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.

EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.

Affected products

Sun Solstice_adminsuite — versions 2.1, 2.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUN, Vendor Advisory)