CVE-1999-1455
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 1999-12-31
- Last modified
- 2024-08-01
Affected products
References
- http://support.microsoft.com/support/kb/articles/q158/3/20.asp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7422