CVE-1999-0828

Summary

CVE-1999-0828 is a vulnerability affecting UnixWare's pkg commands, including pkginfo, pkgcat, and pkgparam. This issue allows local users to bypass file access controls and read arbitrary files on the system. The dacread permission, which is intended to restrict file access based on Discretionary Access Controls, is instead being misused to grant unintended read access. This weakness poses a significant risk to the confidentiality of sensitive data stored on the affected UnixWare system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.