CVE-1999-0627

Severity

0%

Complexity

99%

Confidentiality

0%

The rexd service is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled. The software should be patched and configured properly.

The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.

This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.

The rexd service is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled. The software should be patched and configured properly.

CVSS 2.0 Base Score 0. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:N).

Overview

Type

IBM AIX

First reported 32 years ago

1992-03-01 05:00:00

Last updated 16 years ago

2008-09-09 12:35:00

Affected Software

IBM AIX 3.1

3.1

IBM AIX 3.2

3.2

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.