Vulnerability in Sun Solstice Adminsuite

CVE-1999-1426

Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.

EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.

Affected products

Sun Solstice_adminsuite — versions 2.1, 2.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUN, Vendor Advisory)