CVE-1999-0661

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 54%

from disclosure to weapon977 days

Published on NVDFeb 4

1st PoC+977d

exploitation probability

54%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21919

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=102820843403741&w=2 http://marc.info/?l=bugtraq&m=102821663814127&w=2 http://online.securityfocus.com/archive/1/294539 http://www.cert.org/advisories/CA-1994-07.html http://www.cert.org/advisories/CA-1994-14.html http://www.cert.org/advisories/CA-1999-01.html http://www.cert.org/advisories/CA-1999-02.html http://www.cert.org/advisories/CA-2002-28.html http://www.iss.net/security_center/static/10313.php http://www.securityfocus.com/bid/5921