Local Privilege Escalation and Denial of Service in NeXT NetInfo
CVE-1999-0956

Currently unrated

Key Information:

Vendor

Next

Status
Nextstep
Vendor
CVE Published:
19 September 1997

What is CVE-1999-0956?

The NeXT NetInfo service contains a vulnerability within its _writers property that allows local users to exploit this weakness for unauthorized root privileges. Additionally, it poses a risk of denial of service, impacting the stability and availability of the service. This security flaw can be leveraged by malicious users to compromise system integrity and disrupt normal operations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.