CVE-1999-1424: Medium severity Sun Solstice Adminsuite vulnerability
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Correct the permissions on the NIS+ password table so that only root or designated administrators may modify entries. Ensure ownership and ACL/mode on the NIS+ passwd table and related objects do not grant write access to regular/local users.
Sun Solstice AdminSuite (NIS+ password table) permissions = restrict write access to root/administrators only - Compensating control
Until permissions are corrected or a vendor fix is available, do not use AdminSuite to add or modify user accounts. Perform user creation/password changes only via secure, root-controlled methods or alternative trusted tools.
- Operational
Audit the NIS+ password table and user accounts for unauthorized modifications or accounts with elevated/root privileges. If evidence of compromise is found, remove/disable malicious accounts and rotate any potentially exposed credentials and keys.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1424?
CVE-1999-1424 is considered a high-severity vulnerability due to the potential for local users to gain root access.
How do I fix CVE-1999-1424?
To fix CVE-1999-1424, ensure proper permissions are set on the NIS+ password table to prevent unauthorized modifications.
Which software is affected by CVE-1999-1424?
CVE-1999-1424 affects Solaris Solstice AdminSuite versions 2.1 and 2.2.
Can CVE-1999-1424 be exploited remotely?
CVE-1999-1424 requires local access to be exploited, as it involves modification of password table entries.
Are there any workarounds for CVE-1999-1424?
A workaround for CVE-1999-1424 includes restricting local user permissions until a patch is applied.