Vulnerability Description
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
CVSS Score
10.0
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Next | Next | <= 2.1 |
References
- http://www.cert.org/advisories/CA-1991-06.htmlPatchThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/20
- https://exchange.xforce.ibmcloud.com/vulnerabilities/581
- http://www.cert.org/advisories/CA-1991-06.htmlPatchThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/20
- https://exchange.xforce.ibmcloud.com/vulnerabilities/581
FAQ
What is CVE-1999-1193?
CVE-1999-1193 is a vulnerability with a CVSS score of 10.0 (HIGH). The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
How severe is CVE-1999-1193?
CVE-1999-1193 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1193?
Check the references section above for vendor advisories and patch information. Affected products include: Next Next.