Local Privilege Escalation in BuildDisk on NeXT Systems
CVE-1999-1198

Currently unrated

Key Information:

Vendor

Next

Status
Next
Vendor
CVE Published:
3 October 1990

What is CVE-1999-1198?

The BuildDisk program on NeXT systems prior to version 2.0 allows local users to gain elevated privileges by not prompting for the root password. This flaw can be exploited by attackers with local access to the system, leading to unauthorized control over critical system functions. Users are advised to upgrade to a patched version to mitigate this risk.

References

http://www.cert.org/advisories/CA-1990-06.html
third-party-advisoryx_refsource_CERT
http://ciac.llnl.gov/ciac/bulletins/b-01.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.iss.net/security_center/static/7141.php
vdb-entryx_refsource_XF

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.