CVE-1999-1258: Medium severity Sun SunOS vulnerability
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS/rpc.pwdauthdfrom your environment.Uninstall or remove the rpc.pwdauthd daemon from systems where it is not required to eliminate the exposure.
- Configuration
Disable remote access to the rpc.pwdauthd daemon or configure it to accept connections only from the local host. If the service has a configuration option to restrict interfaces, set it to loopback; otherwise stop/disable the daemon.
rpc.pwdauthd (SunOS) remote access = disabled / listen on localhost only - Compensating control
Block access to rpc.pwdauthd from untrusted networks using network controls (firewall, ACLs or host-based firewall) and restrict access to trusted hosts only until the service is removed or properly secured.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1258?
CVE-1999-1258 is considered a high severity vulnerability due to its potential to allow unauthorized remote access.
How do I fix CVE-1999-1258?
To fix CVE-1999-1258, upgrade your SunOS version to a later release that addresses this vulnerability.
What systems are affected by CVE-1999-1258?
CVE-1999-1258 affects SunOS 4.1.1 and earlier versions.
What kind of information can remote attackers obtain from CVE-1999-1258?
Remote attackers can obtain sensitive system information due to improper access controls in rpc.pwdauthd for CVE-1999-1258.
Is CVE-1999-1258 still relevant for modern systems?
CVE-1999-1258 is primarily of historical interest, as it affects outdated systems that are no longer widely in use.