CVE-1999-1266

Medium

Published: 13/06/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.32%

67th percentile - higher than 67% of all known CVEs

Summary

The rsh daemon (rshd) generates different error messages based on whether a valid username is provided or not, allowing remote attackers to determine valid users on the system.

Risk Assessment

Attackers can exploit this vulnerability to enumerate users, increasing the risk of further attacks on the system.

Recommendation

It is recommended to disable access to the rsh daemon or to use more secure remote access methods such as SSH.

Original NVD description (English source)

rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.