CVE-1999-0168 — Confused Deputy in Sunos
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 4
Latest updateApr 16
Description
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages1 packages
🔴Vulnerability Details
3VulDB
▶
GHSA▶
GHSA-r3m3-g7jw-9454: The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypa↗2022-04-30
CVEList▶
CVE-1999-0168: The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypa↗1999-09-29