CVE-1999-1266 — Corporation Metamail vulnerability
3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.6%
top 29.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 13
Latest updateApr 30
Description
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.
CVSS vector
AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-cp39-g35j-7x79: rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determ↗2022-04-30
CVEList▶
CVE-1999-1266: rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determ↗2001-09-12