PT-1997-1219 · Rshd · Rshd

Publicado 1997-06-13 · Atualizado 2017-12-19 · CVE-1999-1266

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions rsh daemon (rshd) (affected versions not specified)

Description The issue allows remote attackers to determine valid users on the system by generating different error messages when a valid username is provided versus an invalid name.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1266

Produtos afetados

Rshd

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/1660 · Nota
• http://securityfocus.com/archive/1/6978 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1266 · Nota de Segurança