PT-1991-1006 · Next · Nextstep

Publicado 1991-05-14 · Atualizado 2017-10-10 · CVE-1999-1193

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NeXTstep versions 2.1 and earlier

Description The issue concerns the "me" user having wheel group privileges, potentially allowing the "me" user to use the su command to gain root access.

Recommendations For NeXTstep versions 2.1 and earlier, remove the "me" user from the wheel group to prevent potential privilege escalation.

Correção

Identificadores relacionados

CVE-1999-1193

Produtos afetados

Nextstep

Referências · 4

• http://cert.org/advisories/CA-1991-06.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-1999-1193 · Nota de Segurança
• http://securityfocus.com/bid/20 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/581 · Nota