CVE-1999-0740: Medium severity redhat Linux vulnerability
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Red Hat in.telnetd (telnet daemon)from your environment.Uninstall the in.telnetd/telnet daemon package from affected systems if the service is not required.
- Configuration
Disable the telnet service to prevent remote connections (use your distribution's service management tools, e.g., systemctl disable --now telnet.socket or the equivalent).
in.telnetd (telnet daemon on Red Hat Linux) service_enabled = false - Compensating control
Restrict network access to the telnet service (TCP port 23) at the network perimeter or host-based firewall so only trusted management hosts can reach it.
- Operational
Monitor vendor/security advisories and apply any vendor-provided patch or update for in.telnetd as soon as it becomes available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0740?
CVE-1999-0740 is considered a high-severity vulnerability as it allows remote attackers to cause a denial of service.
How do I fix CVE-1999-0740?
To fix CVE-1999-0740, it is recommended to update to a patched version of the telnet daemon or disable the telnet service.
Which systems are vulnerable to CVE-1999-0740?
CVE-1999-0740 affects Red Hat Linux versions 4.2, 5.2, and 6.0.
What type of attack is associated with CVE-1999-0740?
CVE-1999-0740 is associated with a denial of service attack facilitated through a malformed TERM environmental variable.
Can CVE-1999-0740 be exploited remotely?
Yes, CVE-1999-0740 can be exploited remotely by attackers to disrupt telnet services.