CVEvulnerability

CVE-1999-1193

10.0 HIGH Published 1991-05-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1991-05-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.

Affected configurations

• next next (<= 2.1)

Related

Referenced by CWE · observed example (4)

  • CWE-266 Incorrect Privilege Assignment weakness
  • CWE-269 Improper Privilege Management weakness
  • CWE-286 Incorrect User Management weakness
  • CWE-842 Placement of User into Incorrect Group weakness

References