CVE Catalog
CVE-1999-1258
MediumExploitation Probability (EPSS)
Elevated risk1.36%
68th percentile - higher than 68% of all known CVEs
Summary
The rpc.pwdauthd service in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, allowing remote attackers to obtain sensitive system information.
Risk Assessment
Attackers may gain access to sensitive system data, potentially leading to further attacks on the organization's infrastructure.
Recommendation
It is recommended to update the system to a newer version that fixes this vulnerability and to restrict access to the rpc.pwdauthd service.
Original NVD description (English source)
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.