CVE-1999-1023 — Sunos vulnerability

4 documents4 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 78.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Sunos
Timeline
PublishedJun 10
Latest updateApr 30

Description

useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

▶NVDsun/sunos5.7

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mc67-m38f-vc3q: useradd in Solaris 7↗2022-04-30
▶
CVEList
CVE-1999-1023: useradd in Solaris 7↗2001-09-12
▶

💥Exploits & PoCs

1
Exploit-DB
BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation (2)↗1996-10-25
▶
CVE-1999-1023 — SUN Sunos vulnerability | cvebase