Quick answers
- Is CVE-1999-1119 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-1119 being exploited in the wild.
- How severe is CVE-1999-1119?
- Critical severity, with a CVSS score of 10, published 27 April 1992.
- Which products and versions are affected?
- IBM AIX.
- Is there a fix for CVE-1999-1119?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-1119 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-1119?
- Check whether you run IBM Aix. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability stems from an insecure default configuration generated by the 'anon.ftp' installation script in IBM AIX. When this script is used to set up anonymous FTP services, it fails to properly restrict permissions or directory access, creating a path for remote, unauthenticated attackers to execute arbitrary commands on the host system. This is a classic configuration-based remote command execution (RCE) vulnerability. Attackers can reach the vulnerable service over the network without any prior authentication. IBM has historically addressed this through patches and updated configuration guidelines.
Affected products
- IBM AIX
Timeline
- 1992-04-27: disclosed: Initial publication date
- 1992-04-27: advisory: NVD published date