10

CVE-1999-0113

Some implementations of rlogin allow root access if given a -froot parameter.

Data is provided by the National Vulnerability Database (NVD)
IbmAix Version3.1
IbmAix Version3.2
IbmAix Version3.2.4
IbmAix Version3.2.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 18.66% 0.95
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.