CVE-1999-0185: High severity Sun SunOS vulnerability
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rlogin service (SunOS/Solaris)from your environment.Uninstall or remove the rlogin service where it is not required.
- Configuration
Disable the rlogin service on hosts that trust FTP servers to prevent remote connections from FTP data ports from reaching rlogin.
rlogin service (SunOS/Solaris) enabled = false - Configuration
Configure the FTP service so that connections from its data port cannot be used to reach a local rlogin server (prevent FTP data-port-originated connections to local rlogin).
FTP server (SunOS/Solaris) allow_data_port_to_local_rlogin = false - Compensating control
Apply firewall/ACL rules to block or restrict access from remote FTP servers (and FTP data-port connections) to hosts' rlogin service; restrict rlogin access to only explicitly trusted management hosts.
- Operational
Audit and remove trust relationships (for example entries in .rhosts and hosts.equiv) that allow FTP servers to be trusted by other hosts; revoke or revise trust entries that permit rlogin access from FTP servers.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0185?
CVE-1999-0185 is considered a critical vulnerability due to its potential for remote command execution.
How does CVE-1999-0185 exploit the system?
CVE-1999-0185 allows remote users to connect from an FTP server's data port to an rlogin server, potentially executing arbitrary commands on a trusted host.
Which versions of SunOS or Solaris are affected by CVE-1999-0185?
CVE-1999-0185 affects multiple versions including Solaris 2.4, 2.5, 2.5.1, and SunOS versions 4.1.3u1 through 5.5.1.
How can I mitigate CVE-1999-0185?
To mitigate CVE-1999-0185, it is recommended to restrict rlogin access and apply any available patches for the affected Solaris and SunOS versions.
Are there any known exploits for CVE-1999-0185?
Yes, there are known exploitation techniques for CVE-1999-0185 that utilize the FTP and rlogin connection vulnerabilities.