PT-1997-1074 · Digital Equipment+1 · Osf+1

Published 1997-01-01 · Updated 2022-08-17 · CVE-1999-0170

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ultrix (affected versions not specified) OSF (affected versions not specified)

Description Remote attackers can mount an NFS file system, even if it is denied on the access list.

Recommendations For Ultrix, restrict access to the NFS file system until a fix is available. For OSF, consider disabling NFS file system mounting for unauthorized users until a patch is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-1999-0170

Affected Products

Osf

Ultrix

References · 3

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/nfs/nfsmount.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0170 · Security Note
• https://cve.org/CVERecord?id=CVE-1999-0170 · Security Note