CVE-1999-0186 Hardcoded credentials in n/a

Critical 10.0 Published 4 Feb 2000 Updated 17 Mar 2025

Remote attackers can execute arbitrary commands as root or modify system parameters via a default SNMP community string in Solaris.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-1999-0186?

CVE-1999-0186 is a critical vulnerability in Sun Solaris, published on 4 Feb 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.

Which versions are affected by CVE-1999-0186?

It affects 1 product.

Products include Sun Solaris.

How do I fix CVE-1999-0186?

No fix has been published for CVE-1999-0186 yet. Limit exposure of the affected software until one is available.

Is CVE-1999-0186 being exploited?

There is no known exploitation of CVE-1999-0186 in the wild and no public exploit code.

All Sun Solaris vulnerabilities

Sources

Also known as GHSA-92cr-5v4q-xgj9.