A vulnerability, which was classified as critical, has been found in Host (affected version unknown). This issue affects an unknown functionality of the component ident/identd. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The ident/identd service is running.

The weakness was presented 01/01/1999. The identification of this vulnerability is CVE-1999-0629. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

It is declared as highly functional. The vulnerability scanner Nessus provides a plugin with the ID 10021 (Identd Service Detection), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Service detection and running in the context r.

It is possible to mitigate the problem by applying the configuration setting .

The vulnerability is also documented in the databases at X-Force (61) and Tenable (10021). See 14397, 14396, 14395 and 14392 for similar entries.

Productinfo

Name

• Host

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion