CVE-1999-0054: Medium severity Sun SunOS vulnerability
Sun's ftpd daemon can be subjected to a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Sun ftpdfrom your environment.Uninstall or remove the ftpd daemon from systems where FTP service is not required.
- Configuration
Stop the ftpd service and disable it from starting at boot on affected Solaris/SunOS systems until a vendor fix is available.
Sun ftpd daemon (ftpd) service_enabled = false - Compensating control
Restrict access to FTP service (TCP/21 and related data ports) to trusted hosts only using network firewalls, host-based firewalls, or TCP wrappers to reduce exposure to the vulnerable daemon.
- Operational
Monitor system logs and network traffic for signs of denial-of-service attacks targeting ftpd and keep the service disabled or affected systems isolated until vendor remediation is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0054?
CVE-1999-0054 is classified as a medium severity vulnerability due to its potential for denial of service.
How do I fix CVE-1999-0054?
To fix CVE-1999-0054, ensure you are using an updated version of the Sun ftpd daemon that addresses this vulnerability.
Which systems are affected by CVE-1999-0054?
CVE-1999-0054 affects various versions of SunOS and Solaris, specifically versions 5.3, 5.4, 5.5, 5.5.1, 2.4, 2.5, 2.5.1, and 2.6.
What impact does CVE-1999-0054 have on systems?
CVE-1999-0054 allows attackers to exploit the ftpd daemon, potentially causing a denial of service that disrupts normal operations.
Is CVE-1999-0054 still a concern today?
While CVE-1999-0054 is an older vulnerability, systems running outdated SunOS or Solaris versions may still be at risk.