PT-1991-1006 · Next · Nextstep

Published 1991-05-14 · Updated 2017-10-10 · CVE-1999-1193

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NeXTstep versions 2.1 and earlier

Description The issue concerns the "me" user having wheel group privileges, potentially allowing the "me" user to use the su command to gain root access.

Recommendations For NeXTstep versions 2.1 and earlier, remove the "me" user from the wheel group to prevent potential privilege escalation.

Fix

Related Identifiers

CVE-1999-1193

Affected Products

Nextstep

References · 4

• http://cert.org/advisories/CA-1991-06.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1193 · Security Note
• http://securityfocus.com/bid/20 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/581 · Note