| Vulnerability Name: | CVE-1999-0186 (CCN-1385) | ||||||||
| Assigned: | 1998-10-01 | ||||||||
| Published: | 1998-10-01 | ||||||||
| Updated: | 2008-09-09 | ||||||||
| Summary: | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-1999-0186 Source: MITRE Type: CNA CVE-1999-0516 Source: CCN Type: Sun Microsystems, Inc. Security Bulletin #00178 SNMP Source: CONFIRM Type: UNKNOWN http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm Source: CCN Type: Internet Security Systems Security Alert #11 Hidden community string in SNMP implementation Source: CCN Type: Internet Security Systems Security Alert #13 Hidden community string in SNMP implementation Source: CCN Type: BID-177 Solaris SNMP Vulnerability Source: CCN Type: Sun Microsystems, Inc. Web site Solstice Enterprise Agents Source: XF Type: UNKNOWN sol-hidden-commstr(1385) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||