CVE Catalog

CVE-1999-1467

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
10.23%

95th percentile - higher than 95% of all known CVEs

Summary

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.

Risk Assessment

Attackers may gain full system privileges, posing a serious security threat to the organization.

Recommendation

It is recommended to review and secure the configuration of the nobody user and restrict access to rcp only to trusted hosts.

Original NVD description (English source)

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS