4327 matches found
security flaw
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...
CVE-1999-1198
The vulnerability affects the BuildDisk program on NeXT systems prior to 2.0. It fails to prompt for the root password, enabling local users to gain root privileges. Root cause: missing authentication prompt in BuildDisk. Impact: local privilege escalation with complete compromise of the affected...
CVE-1999-1193
CVE-1999-1193 affects NeXTSTEP 2.1 and earlier: the 'me' user has wheel group privileges enabling use of su to become root. The underlying cause is the me account being in the wheel group, granting root‑level access. Impact stated as privilege escalation to root; no explicit remediation or patch ...
CVE-1999-1193
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root...
CVE-1999-1198
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges...
CVE-1999-1198: Undefined Security Weakness
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges...
CVE-1999-1193: Undefined Security Weakness
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root...
CVE-1999-1391
Vulnerability CVE-1999-1391 affects NeXT 1.0a/1.0 where printers are publicly accessible. Local users can escalate privileges via the npd program coupled with weak directory permissions. Public documents in PT-1990-1006 describe the exposure and recommend restricting access to printers and correc...
CVE-1999-1392
The connected PT-1990-1007 entry confirms a local privilege escalation in NeXT 1.0a–1.0 due to the restore0.9 installation script. Affected component: restore0.9 installer; root privileges gained through the installation process. No public exploit details are provided. Remediation status: PTSecur...
CVE-1999-1391
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions...
CVE-1999-1392
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges...
CVE-1999-1392: Undefined Security Weakness
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges...
CVE-1999-1391: Undefined Security Weakness
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions...
CVE-1999-0956
Affected software: NeXT NetInfo. Vulnerable component: the _writers property, whose misbehavior enables privilege escalation and DoS. Root cause / details: described as a problem with the writers property leading to local access exploitation. Impact: local users could gain root privileges or caus...
CVE-1999-0956
The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...
CVE-1999-0956: Undefined Security Weakness
The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...
CVE-1999-0956
The NeXT NetInfo writers property allows local users to gain root privileges or conduct a denial of service...
CVE-1999-1391
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions...