PT-1997-1241 · Oracle · Solaris Solstice Adminsuite

Published 1997-11-10 · Updated 2008-09-05 · CVE-1999-1426

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Solaris Solstice AdminSuite version 2.1

Description The issue allows local users to overwrite arbitrary files because it follows symbolic links when updating an NIS database.

Recommendations For Solaris Solstice AdminSuite version 2.1, consider restricting the update functionality of the NIS database to prevent local users from overwriting arbitrary files until a patch is available.

Fix

Related Identifiers

CVE-1999-1426

Affected Products

Solaris Solstice Adminsuite

References · 3

• http://securityfocus.com/bid/208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1426 · Security Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145 · Vendor Advisory