EUVD-1999-1409

Malware in sbrugna...

CVE-1999-1427

Affected software: Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. Vulnerability: insecure creation of lock files. Root cause: insecure lock file handling allows local users to gain root privileges. Impact: local privilege escalation to root on affected systems. Remediation: not provided in...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

CVE-1999-1428: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...

CVE-1999-1425: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1427: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1426: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1424: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...