CVE Catalog

CVE-1999-0185

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.38%

94th percentile - higher than 94% of all known CVEs

Summary

In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.

Risk Assessment

This vulnerability poses a risk of unauthorized access to the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to limit trust in FTP servers and implement additional security measures such as firewalls and network traffic monitoring.

Original NVD description (English source)

In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS