CVE-1999-1355: High severity Compaq Management Agents for Servers vulnerability
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
BMC Patrol component (installed with Compaq Management Agents)from your environment.Uninstall the BMC Patrol component from systems where it is not required.
- Configuration
Change the default password for the PFCUser account to a strong, unique password immediately on all affected systems.
BMC Patrol (PFCUser account created by Compaq Management Agents) PFCUser password = change from default to a strong unique password - Configuration
Disable the PFCUser account if it is not required.
BMC Patrol (PFCUser account created by Compaq Management Agents) PFCUser account enabled = false - Configuration
Remove any administrative or otherwise dangerous privileges from the PFCUser account; assign only the minimum privileges required.
BMC Patrol (PFCUser account created by Compaq Management Agents) PFCUser privileges = remove administrative/dangerous privileges - Compensating control
Restrict network access to management interfaces provided by Compaq Management Agents / BMC Patrol (for example via firewall rules, ACLs or network segmentation) to only trusted administrative IP addresses or networks.
- Operational
Inventory systems to identify installations of Compaq Management Agents/BMC Patrol and the presence of the PFCUser account; audit for use of default credentials, change or disable the account as appropriate, and review logs for signs of unauthorized access.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1355?
CVE-1999-1355 is characterized as a moderate severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-1999-1355?
To remediate CVE-1999-1355, remove or disable the PFCUser account and update to a version of the Compaq Insight Management Agent or Management Agents for Servers later than the affected versions.
What systems are affected by CVE-1999-1355?
CVE-1999-1355 affects Compaq Insight Management Agent versions 4.23 and earlier as well as Management Agents for Servers versions 4.40 and earlier.
What risks are associated with CVE-1999-1355?
The risks associated with CVE-1999-1355 include unauthorized access to system resources due to the default password and excessive privileges of the PFCUser account.
Is CVE-1999-1355 still a concern today?
While CVE-1999-1355 was reported in 1999, it may still be a concern for legacy systems using the specified affected software versions.