CVE-1999-0167: Medium severity Sun SunOS vulnerability
In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the NFS export configuration to only export file systems to specific, trusted host addresses or networks and remove any exports that allow anonymous or public access.
SunOS NFS (export configuration) export list / permissions = restrict to explicit trusted hosts; remove public/anonymous exports - Configuration
Stop and disable the NFS server on systems that do not require exporting file systems.
SunOS NFS service service state = disabled (if not required) - Compensating control
Restrict access to NFS from untrusted networks by firewalling or ACLs; allow NFS traffic only from trusted management networks/hosts and block NFS/RPC ports from public or untrusted networks.
- Operational
Audit currently exported file systems and access logs for signs of unauthorized access, unexport or relocate sensitive data as needed, and monitor exports for suspicious activity until a permanent fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0167?
CVE-1999-0167 has been classified as a moderate severity vulnerability.
How does CVE-1999-0167 affect SunOS users?
CVE-1999-0167 allows unauthorized access to the exported file system due to guessable NFS file handles.
How do I fix CVE-1999-0167?
To fix CVE-1999-0167, it is recommended to upgrade to a newer version of SunOS that addresses this vulnerability.
Which versions of SunOS are affected by CVE-1999-0167?
CVE-1999-0167 specifically affects SunOS version 4.1.1.
What type of attack can exploit CVE-1999-0167?
CVE-1999-0167 can be exploited through unauthorized access to the NFS file system, potentially allowing attackers to read or modify files.