CVE-1999-1450: High severity SCO OpenServer vulnerability
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rlogin / rshd (SCO OpenServer / SCO UnixWare)from your environment.Uninstall the rlogin/rshd package if the service is not required.
- Remove
Remove
scheme (SCO OpenServer / SCO UnixWare)from your environment.Uninstall the 'scheme' component if it is not required.
- Configuration
Disable the rlogin/rshd daemon on SCO OpenServer and SCO UnixWare systems until a vendor fix is available.
rlogin / rshd enabled = false - Configuration
Disable the 'scheme' component on SCO OpenServer and SCO UnixWare systems until a vendor fix is available.
scheme enabled = false - Compensating control
Restrict network access to rlogin/rshd and the scheme service to trusted hosts only (firewall, ACLs, or network segmentation) and block remote access until vendor mitigations or patches are available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1450?
CVE-1999-1450 is considered a high severity vulnerability due to its potential to allow remote attackers to gain privileges.
How do I fix CVE-1999-1450?
To fix CVE-1999-1450, upgrade your SCO OpenServer or SCO UnixWare to a version that is not vulnerable.
What systems are affected by CVE-1999-1450?
CVE-1999-1450 affects SCO UNIX OpenServer versions 5.0.5 and earlier, and SCO UnixWare versions 7.0.1 and earlier.
Can CVE-1999-1450 be exploited remotely?
Yes, CVE-1999-1450 can be exploited remotely due to vulnerabilities in the rlogin daemon and rshd.
Is there a patch available for CVE-1999-1450?
No specific patch is provided for CVE-1999-1450; users are advised to update to secure software versions instead.