PT-1997-1219 · Rshd · Rshd

Published 1997-06-13 · Updated 2017-12-19 · CVE-1999-1266

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions rsh daemon (rshd) (affected versions not specified)

Description The issue allows remote attackers to determine valid users on the system by generating different error messages when a valid username is provided versus an invalid name.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1266

Affected Products

Rshd

References · 3

• http://securityfocus.com/archive/1/6978 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1266 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1660 · Note