CVE-1999-1198: Next

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.

Affected products

• Next Next: up to and including 2.0

Published 1990-10-03. Last modified 2026-06-16.