CVE-1999-1355
First published: Fri Dec 31 1999(Updated: )
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Compaq Management Agents | <=4.40 | |
| Compaq Management Agents | <=4.20 | |
| <=4.20 | ||
| <=4.40 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.compaq.com/products/servers/management/advisory.html
- http://marc.info/?l=ntbugtraq&m=93654336516711&w=2
- http://marc.info/?l=ntbugtraq&m=93759822430801&w=2
- http://marc.info/?l=ntbugtraq&m=93542118727732&w=2
- http://marc.info/?l=ntbugtraq&m=94183795025294&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3231
Frequently Asked Questions
What is the severity of CVE-1999-1355?
CVE-1999-1355 is characterized as a moderate severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-1999-1355?
To remediate CVE-1999-1355, remove or disable the PFCUser account and update to a version of the Compaq Insight Management Agent or Management Agents for Servers later than the affected versions.
What systems are affected by CVE-1999-1355?
CVE-1999-1355 affects Compaq Insight Management Agent versions 4.23 and earlier as well as Management Agents for Servers versions 4.40 and earlier.
What risks are associated with CVE-1999-1355?
The risks associated with CVE-1999-1355 include unauthorized access to system resources due to the default password and excessive privileges of the PFCUser account.
Is CVE-1999-1355 still a concern today?
While CVE-1999-1355 was reported in 1999, it may still be a concern for legacy systems using the specified affected software versions.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/compaq
- canonical/compaq management agents
- version/compaq management agents/4.40
- version/compaq management agents/4.20