CVE-1999-0208

CVSS 2.0 Score 10 of 10 (high)

Details

Published Dec 12, 1995
Updated: Nov 20, 2024

Summary

CVE-1999-0208 is a vulnerability affecting the rpc.ypupdated component of the Network Information Service (NIS). Hackers can exploit this weakness to execute arbitrary commands remotely, posing a significant security risk. The NIS service, which is used for managing distributed system configurations, is vulnerable due to insufficient access controls. An attacker can take advantage of this by sending crafted packets to the targeted system, potentially leading to full system compromise. It is essential for organizations using NIS to apply the available patch or take other mitigating measures to protect against this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM AIX
  • SGI IRAX

Affected Vendors

  • IBM Corporation
  • Saskatchewan Government Insurance
  • NEC Corporation