Is CVE-1999-0209 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0209 being exploited in the wild.

How severe is CVE-1999-0209?

Medium severity, with a CVSS score of 5, published 14 August 1990.

Is there a fix for CVE-1999-0209?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0209 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-0209?

Check whether you run Sun Microsystems SunView. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0209: Sun Microsystems SunView remote file disclosure in selection_svc

CVE-1999-0209 · Severity: medium · CVSS 5 · Published 1990-08-14

A vulnerability in the SunView selection service allows unauthorized individuals to remotely access and read files on affected systems. This component is part of an older graphical user interface environment for Sun workstations. An exploit could lead to the exposure of sensitive system or user data, potentially compromising the confidentiality of the entire workstation.

Vendors: Sun Microsystems.

Quick answers

Is CVE-1999-0209 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0209 being exploited in the wild.
How severe is CVE-1999-0209?: Medium severity, with a CVSS score of 5, published 14 August 1990.
Which products and versions are affected?: Sun Microsystems SunView (SunTools).
Is there a fix for CVE-1999-0209?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0209 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-0209?: Check whether you run Sun Microsystems SunView. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The selection_svc facility in Sun Microsystems' SunView (SunTools) environment contains a vulnerability that allows remote file disclosure. By interacting with the selection service over the network, an unauthenticated attacker can bypass intended access controls to read arbitrary files from the host system. This is a legacy vulnerability affecting early SunOS environments. The root cause is a lack of proper validation or access control within the RPC-based selection service, which was designed to facilitate data exchange between applications but can be abused to retrieve file contents.

Affected products

Sun Microsystems SunView (SunTools)

Timeline

1990-08-14: disclosed

References

http://www.securityfocus.com/bid/8

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.