A vulnerability was found in AT&T TCP and IP 4.0 on SVR4. It has been declared as very critical. This vulnerability affects some unknown processing of the file /usr/etc/rexecd. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
| Field | 06/16/2014 03:30 PM | 04/03/2019 12:01 PM |
|---|---|---|
| vendor | AT&T | AT&T |
| name | TCP/IP | TCP/IP |
| version | 4.0 | 4.0 |
| platform | SVR4 | SVR4 |
| file | /usr/etc/rexecd | /usr/etc/rexecd |
| notaffectedlist | AT&T TCP/IP 3.2 AT&T SVR4 4.0 | AT&T TCP/IP 3.2 AT&T SVR4 4.0 |
| risk | 2 | 2 |
| cvss2 | 10.0 | 10.0 |
| cvss2 | 10.0 | 10.0 |
| cvss2 | N | N |
| cvss2 | L | L |
| cvss2 | N | N |
| cvss2 | C | C |
| cvss2 | C | C |
| cvss2 | C | C |
| cvss3 | 9.8 | 9.8 |
| cvss3 | 9.8 | 9.8 |
| cvss3 | 9.8 | 9.8 |
| cvss3 | 9.8 | 9.8 |
| date | 698976000 (02/25/1992) | 698976000 (02/25/1992) |
| url | http://www.cert.org/advisories/CA-1992-04.html | http://www.cert.org/advisories/CA-1992-04.html |
| price | $0-$5k | $0-$5k |
| cve | CVE-1999-1059 | CVE-1999-1059 |
| cvss3 | N | N |
| location | Website | Website |
| cvss2 | ND | ND |
| cvss2 | ND | ND |
| cvss2 | ND | ND |
| cvss3 | X | X |
| cvss3 | X | X |
| cvss3 | X | X |
| cvss3 | N | N |
| cvss3 | L | L |
| cvss3 | N | N |
| cvss3 | U | U |
| cvss3 | H | H |
| cvss3 | H | H |
| cvss3 | H | H |
| cvss2 | N | |
| cvss2 | L | |
| cvss2 | N | |
| cvss2 | C | |
| cvss2 | C | |
| cvss2 | C | |
| cve | 698976000 | |
| cve | vulnerability in rexec daemon (rexecd) in at&t tcp/ip 4.0 for various svr4 systems allows remote attackers to execute arbitrary commands. | |
| securityfocus | 36 | |
| securityfocus | 698976000 (02/25/1992) | |
| securityfocus | Unknown | |
| securityfocus | AT&T TCP/IP /usr/etc/rexecd Vulnerability | |
| cwe | 0 | 269 (privilege escalation) |
Do you know our Splunk app?
Download it now for free!