CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

1999-01-01

Last modified

2024-08-01

Weaknesses

CWE-16

Affected products

• Linux Kernel (Linux)

References

• http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638
• https://exchange.xforce.ibmcloud.com/vulnerabilities/348