CVE-1999-1382
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Dec 31, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1382 is a vulnerability affecting NetWare's NFS (Network File System) implementation in modes 1 and 2. Instead of properly enforcing read-only access, NetWare incorrectly grants root privileges to local users by altering a file's ownership. A malicious user can exploit this by creating a setuid program and setting it to read-only. As a result, NetWare-NFS mistakenly treats the setuid program as a setuid root program, enabling the attacker to gain root privileges on the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Novell NetWare
Affected Vendors
- Novell Inc