Lucene search

[email protected]CVE-1999-0185

HistoryOct 01, 1997 - 4:00 a.m.

CVE-1999-0185

1997-10-0104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sunos

solaris

remote user

command execution

ftp server

rlogin server

nvd

cve-1999-0185

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.0%

JSON

In SunOS or Solaris, a remote user could connect from an FTP server’s data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.

CPENameOperatorVersion
sun:sunossun sunoseq5.3
sun:sunossun sunoseq4.1.4
sun:solarissun solariseq2.4
sun:solarissun solariseq2.5.1
sun:solarissun solariseq2.5
sun:sunossun sunoseq5.5
sun:sunossun sunoseq5.4
sun:sunossun sunoseq5.5.1
sun:sunossun sunoseq4.1.3u1

CPE	Name	Operator	Version
sun:sunos	sun sunos	eq	5.3
sun:sunos	sun sunos	eq	4.1.4
sun:solaris	sun solaris	eq	2.4
sun:solaris	sun solaris	eq	2.5.1
sun:solaris	sun solaris	eq	2.5
sun:sunos	sun sunos	eq	5.5
sun:sunos	sun sunos	eq	5.4
sun:sunos	sun sunos	eq	5.5.1
sun:sunos	sun sunos	eq	4.1.3u1

References

sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.0%

JSON