CVE-1999-1450

Summary

CVE-1999-1450 is a privilege escalation vulnerability affecting the rlogin daemon (rshd) and scheme component on SCO UNIX OpenServer 5.0.5 and earlier, as well as SCO UnixWare 7.0.1 and earlier. An attacker can exploit this flaw to elevate their privileges remotely. (1) The rlogin daemon contains a weakness that allows unauthorized access to the /etc/passwd file, while (2) the scheme component has a buffer overflow issue in its getpwent() function. By combining these vulnerabilities, an attacker can manipulate the system's file permissions and gain higher privileges, potentially leading to a complete system takeover.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.