Is CVE-1999-1467 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1467 being exploited in the wild.

How severe is CVE-1999-1467?

Critical severity, with a CVSS score of 10, published 26 October 1989.

Is there a fix for CVE-1999-1467?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-1467 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-1467?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1467: Sun Microsystems SunOS arbitrary command execution in rcp

CVE-1999-1467 · Severity: critical · CVSS 10 · Published 1989-10-26

A critical vulnerability in the remote file copy (rcp) utility of SunOS 4.0.x allows unauthorized users to take complete control of a system. By exploiting a flaw in how the system handles remote requests from trusted hosts, an attacker can execute commands with the highest level of administrative privileges (root). This could lead to total data theft, system destruction, or the installation of persistent backdoors.

Quick answers

Is CVE-1999-1467 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1467 being exploited in the wild.
How severe is CVE-1999-1467?: Critical severity, with a CVSS score of 10, published 26 October 1989.
Which products and versions are affected?: Sun Microsystems SunOS 4.0.x.
Is there a fix for CVE-1999-1467?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-1467 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-1467?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The rcp (remote copy) utility in SunOS 4.0.x contains a vulnerability that allows remote command execution with root privileges. The flaw is triggered when a request originates from a 'trusted host' (as defined in system configuration files like /etc/hosts.equiv or .rhosts). The root cause is reportedly related to the configuration or handling of the 'nobody' user account during remote operations. An attacker on a trusted network can leverage this to bypass authentication and execute arbitrary shell commands. This vulnerability was originally identified in 1989 and is addressed in vendor-specific patches from that era.

Affected products

Sun Microsystems SunOS 4.0.x

Timeline

1989-10-26: disclosed: Initial disclosure and CERT advisory CA-1989-07 published.
1999-12-30: advisory: CVE-1999-1467 assigned.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.