Description
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
References
- CA-1991-06 third-party-advisory
- 20 vdb-entry
- next-me(581) vdb-entry
Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.