CVE-1999-1467
CVE-1999-1467 is a critical-severity vulnerability in Sun Sunos with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 10% places it in the 95th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 10% (95th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sun Sunos
- Published:
- Last modified:
Description
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
Frequently asked questions
- What is CVE-1999-1467?
- Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
- How severe is CVE-1999-1467?
- CVE-1999-1467 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-1999-1467 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 10% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-1999-1467?
- CVE-1999-1467 primarily affects Sun Sunos. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-1999-1467?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-1999-1467 published?
- CVE-1999-1467 was published on 1989-10-26 and last updated on 2026-06-16.
References
- http://www.cert.org/advisories/CA-1989-07.html
- http://www.securityfocus.com/bid/5
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3165
Affected products (5)
- cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*
More vulnerabilities in Sun Sunos
- CVE-2010-4435 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity,…
- CVE-2008-4619 — Critical (CVSS 10.0): The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted…
- CVE-2008-2144 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to…
- CVE-2008-1369 — Critical (CVSS 10.0): A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and…
- CVE-2007-3093 — Critical (CVSS 10.0): Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10…
- CVE-2007-0882 — Critical (CVSS 10.0): Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11)…