Unscored severity · published Oct 3, 1990
CVE-1999-1198
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges
–
CVSS
0.4%
EPSS
No
On KEV
Description
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Next · Next
through 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1198
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1198
Patch
http://ciac.llnl.gov/ciac/bulletins/b-01.shtml
Patch
http://www.cert.org/advisories/CA-1990-06.html
www.iss.net
http://www.iss.net/security_center/static/7141.php
www.securityfocus.com
http://www.securityfocus.com/bid/11
More from Next
7.3
CVE-2026-78180
alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution
–
CVE-1999-1468
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable
–
CVE-1999-1193
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root
–
CVE-1999-1391
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions
–
CVE-1999-1392
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges