Lucene search

[email protected]CVE-1999-0795

HistoryMar 01, 1998 - 5:00 a.m.

CVE-1999-0795

1998-03-0105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

nis+

rpc.nisd server

remote attackers

rpc calls

no authentication

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.

CPENameOperatorVersion
sun:solarissun solariseq*
sun:sunossun sunoseq*

CPE	Name	Operator	Version
sun:solaris	sun solaris	eq	*
sun:sunos	sun sunos	eq	*

References

exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON