CVE-1999-0208

Description

rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.

Affected products

• ibm / aix3.2 – 3.2
• ibm / aix4.1 – 4.1
• NEC / asl_ux_4800
• NEC / ews-ux_v
• NEC / up-ux_v
• sgi / irix5.2 – 5.2
• sgi / irix5.1 – 5.1
• sgi / irix5.0 – 5.0
• sgi / irix4 – 4
• sgi / irix3 – 3

Exploits & proofs of concept

• exploit-dbHP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (2)by anonymous
• exploit-dbHP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (1)by Josh D

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208