First published: Mon Oct 04 1999(Updated: )
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xinuos UnixWare | =7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0942 is classified as a high severity vulnerability due to its potential to allow local users to gain root privileges.
To fix CVE-1999-0942, it is recommended to remove or restrict the use of the STATICMERGE environmental variable in UnixWare 7.1.
CVE-1999-0942 specifically affects UnixWare version 7.1.
CVE-1999-0942 cannot be exploited remotely as it requires local access to the system.
Exploiting CVE-1999-0942 can lead to unauthorized root access, compromising the entire UnixWare system.