CVE-1999-0828
CVSS 2.0 Score 3.6 of 10 (low)
Details
Published Dec 2, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0828 is a vulnerability affecting UnixWare's pkg commands, including pkginfo, pkgcat, and pkgparam. The issue permits local users to access arbitrary files by exploiting the dacread permission, which is intended to control data access based on file ownership and permissions. This vulnerability can potentially lead to sensitive information disclosure or system compromise if exploited successfully. Unpatched UnixWare systems are susceptible to this issue. Users are advised to apply the available patches or updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- California State Controller’s Office