First published: Thu Oct 01 1998(Updated: )
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Solaris and Zettabyte File System (ZFS) | =2.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0186 is considered critical due to the potential for remote attackers to execute arbitrary commands as root.
To fix CVE-1999-0186, change the default SNMP community string from its default value to a more secure option.
CVE-1999-0186 specifically affects Solaris version 2.6.
CVE-1999-0186 allows attackers to modify system parameters or execute arbitrary commands, compromising system integrity.
While CVE-1999-0186 is an older vulnerability, systems running Solaris 2.6 remain at risk if not patched or secured.