CVE-1999-0185 Auth bypass in n/a
Remote attackers can execute commands on trusted hosts by spoofing FTP data connections to rlogin services.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0185?
CVE-1999-0185 is a high-severity authentication bypass vulnerability in Sun Solaris, published on 29 Sep 1999. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
Which versions are affected by CVE-1999-0185?
It affects 2 products.
Products include Sun Solaris, Sun Sunos.
How do I fix CVE-1999-0185?
No fix has been published for CVE-1999-0185 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-1999-0185 being exploited?
There is no known exploitation of CVE-1999-0185 in the wild and no public exploit code.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-gcg2-8wmh-x2h4.