Vulnerabilities > CVE-1999-1193 - Unspecified vulnerability in Next

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
next
critical
NVD
Published: 1991-05-14
Updated: 2017-10-10

Summary

The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.

Vulnerable Configurations

Part Description Count
Application
Next
1

References