CVE-1999-1382

Summary

CVE-1999-1382 is a vulnerability affecting NetWare's implementation of Network File System (NFS) mode 1 and 2. Instead of properly enforcing read-only access, NetWare changes the file ownership to root when the "Read Only" flag is set. This allows local users to create a setuid program and then set it to read-only, effectively making it a setuid root program. This vulnerability can result in significant privileged escalation, allowing attackers to gain full control of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.