Sun Solstice Adminsuite vulnerabilities

5 CVEs affecting Sun Solstice Adminsuite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-1428, published 1997-11-10.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-1424, published 1997-11-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table…
• CVE-1999-1425, published 1997-11-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
• CVE-1999-1426, published 1997-11-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
• CVE-1999-1427, published 1997-11-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.
• CVE-1999-1428, published 1997-11-10. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.