CVE-1999-0189

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Jun 4, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-0189 is a vulnerability affecting Solaris systems where the rpcbind service listens on a high numbered UDP port, which may not be filtered by default firewalls. Since the standard port number for rpcbind is 111, unsecured access to this high port could allow remote attackers to execute arbitrary commands on the system. This issue poses a significant risk, as it enables unauthenticated and unencrypted connections, making it essential for administrators to configure their firewalls to block access to these high ports or limit access to trusted sources.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share