CVE-1999-1467: Critical severity Sun SunOS vulnerability
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS rcpfrom your environment.Disable or uninstall the rcp (remote-copy) service on affected SunOS 4.0.x systems if it is not required.
- Configuration
Reconfigure the 'nobody' user to have minimal privileges and ensure it cannot be used to execute root-level commands (for example, remove shell access or make it a non-login account).
SunOS nobody user nobody user configuration = restrict privileges - Compensating control
Restrict trusted-host access: remove or tighten entries in trusted-host mechanisms (e.g., /etc/hosts.equiv and user .rhosts files) and block or limit rcp/rsh traffic at network firewalls or host-based access controls to only necessary administrative IPs.
- Operational
Audit systems for signs of compromise (unauthorized root commands or changes). If compromise is suspected, perform incident response actions such as rebuilding affected hosts and rotating root/service credentials.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1467?
CVE-1999-1467 is considered a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary commands as root.
How do I fix CVE-1999-1467?
To fix CVE-1999-1467, you should upgrade to a patched version of SunOS that addresses this vulnerability.
Who is affected by CVE-1999-1467?
CVE-1999-1467 affects users running SunOS versions 4.0.x, including specific versions from 4.0.1 to 4.0.3c.
What are the risks of CVE-1999-1467?
The risks associated with CVE-1999-1467 include unauthorized access and control over affected systems by remote attackers.
Can CVE-1999-1467 affect trusted hosts?
Yes, CVE-1999-1467 can be exploited by remote attackers who have trusted access to execute malicious commands on vulnerable systems.