Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0502 — HP Hp-ux vulnerability

6 documents5 sources
Severity
7.5HIGHNVD
EPSS
38.9%
top 2.72%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
HP Hp-uxRedhat LinuxSUN Solaris+1 more
Timeline
PublishedMar 1
Latest updateApr 30

Description

A Unix account has a default, null, blank, or missing password.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages4 packages

▶NVDhp/hp-ux10.20, 11+1
▶NVDsun/sunos5.5.1, 5.7, 5.8+2
▶NVDsun/solaris2.6
▶NVDredhat/linux6.0

🔴Vulnerability Details

3
GHSA
GHSA-wxmx-mhq2-c8w6: A Unix account has a default, null, blank, or missing password↗2022-04-30
▶
CVEList
CVE-1999-0502: A Unix account has a default, null, blank, or missing password↗2000-02-04
▶
VulnCheck
Unix Distributions Account Credentials Vulnerability↗1999
▶

💥Exploits & PoCs

2
Exploit-DB
Varnish Cache CLI Interface - Remote Code Execution (Metasploit)↗2014-12-19
▶
Exploit-DB
SSH - User Code Execution (Metasploit)↗1999-01-01
▶
CVE-1999-0502 — HP Hp-ux vulnerability | cvebase