Privilege Escalation in NeXT NeXTstep by NeXT Software
CVE-1999-1193

Currently unrated

Key Information:

Vendor: Next
Status: Next
Vendor: CVE Published:; 14 May 1991

What is CVE-1999-1193?

In NeXT NeXTstep 2.1 and earlier, the 'me' user is granted wheel group privileges that potentially enable it to execute the 'su' command, resulting in unauthorized access to root-level capabilities. This vulnerability may allow an attacker with access to the 'me' user account to escalate their privileges and gain administrative control over the system.

References

http://www.cert.org/advisories/CA-1991-06.html

third-party-advisoryx_refsource_CERT

http://www.securityfocus.com/bid/20

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/581

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Aug 31, 2001
Vulnerability published
May 14, 1991

CVE-1999-1193 Data

JSON

Next

What is CVE-1999-1193?

References

Timeline