CVE Catalog
CVE-1999-0656
MediumExploitation Probability (EPSS)
Elevated risk1.55%
72th percentile - higher than 72% of all known CVEs
Summary
The ugidd RPC interface allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
Risk Assessment
Attackers may gain access to information about existing users in the system, potentially leading to further attacks or security breaches.
Recommendation
It is recommended to restrict access to the ugidd interface and monitor logs for unauthorized access attempts.
Original NVD description (English source)
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.