CVE-1999-1425: Medium severity Sun Solstice Adminsuite vulnerability
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure all NIS map source files (for example /etc/passwd and other AdminSuite-managed source files) are owned by root and are not writable by group or others. Example remediation commands: chown root:root /etc/passwd; chmod 0644 /etc/passwd (use 0600 for shadow files as appropriate). Audit and correct permissions on all NIS map source files managed by AdminSuite.
Solaris Solstice AdminSuite (AdminSuite) 2.1 file permissions on source files for NIS maps (including /etc/passwd) = remove write permission for non-root users; ensure root ownership - Operational
Audit the integrity of /etc/passwd, /etc/shadow and other NIS map source files for unauthorized changes; if modifications are found, restore those files from known-good backups, investigate scope of changes, and rotate credentials/passwords/keys for any accounts that may have been altered or compromised. Review local accounts for unexpected privilege grants.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1425?
CVE-1999-1425 is classified as a moderate vulnerability due to its potential for privilege escalation.
How do I fix CVE-1999-1425?
To fix CVE-1999-1425, ensure that write permissions on source files for NIS maps are correctly configured to prevent local users from modifying critical files.
What versions of Solaris are affected by CVE-1999-1425?
CVE-1999-1425 affects Solaris Solstice AdminSuite versions 2.1 and 2.2.
What type of vulnerability is CVE-1999-1425?
CVE-1999-1425 is a privilege escalation vulnerability affecting local users.
Who is impacted by CVE-1999-1425?
Local users with access to the affected Solaris systems can exploit CVE-1999-1425 to gain unauthorized privileges.