CVE-1999-0555

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

A Unix account with a name other than "root" has UID 0, i.e. root privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-055610.0Two or more Unix accounts have the same UID.CVE-1999-055910.0A system-critical Unix file or directory has inappropriate permissions.CVE-1999-056010.0A system-critical Windows NT file or directory has inappropriate permissions.CVE-1999-056110.0IIS has the #exec function enabled for Server Side Include (SSI) files.CVE-1999-056410.0An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.CVE-1999-056510.0A Sendmail alias allows input to be piped to a program.CVE-1999-056810.0rpc.admind in Solaris is not running in a secure mode.CVE-1999-056910.0A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html fiCVE-1999-057010.0Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.CVE-1999-057110.0A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary CVE-1999-057710.0A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.CVE-1999-05784.6A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
CVE-1999-0555: Critical severity, CVSS 10.0 | Vulnix