PT-1999-1717 · Microsoft · Windows Nt

Publicado 1999-12-31 · Atualizado 2017-10-10 · CVE-1999-1455

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows NT versions 3.5 through 4.0

Description: The RSH service utility RSHSVC does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host. This could allow unauthorized users to access the service by logging in from an authorized host.

Recommendations: For Windows NT versions 3.5 through 4.0, consider restricting access to the RSH service utility RSHSVC to minimize the risk of exploitation. As a temporary workaround, review and update the .Rhosts file to ensure it accurately reflects authorized hosts and users.

Correção

Identificadores relacionados

CVE-1999-1455

Produtos afetados

Windows Nt

Referências · 3

• http://support.microsoft.com/support/kb/articles/q158/3/20.asp · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7422 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1455 · Nota de Segurança