Vulnerability Description
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
CVSS Score
10.0
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sgi | Irix | 6.2 |
| Cray | Unicos | All versions |
References
- ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P
- http://www.ciac.org/ciac/bulletins/j-052.shtml
- ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P
- http://www.ciac.org/ciac/bulletins/j-052.shtml
FAQ
What is CVE-1999-0692?
CVE-1999-0692 is a vulnerability with a CVSS score of 10.0 (HIGH). The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
How severe is CVE-1999-0692?
CVE-1999-0692 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-0692?
Check the references section above for vendor advisories and patch information. Affected products include: Sgi Irix, Cray Unicos.