RLOGIN: Multiple User Root Access

This signature detects a old issue in rlogin wherein certain implementations would allow root access when trying to login via non privileged accounts. Latest specifications and implementations of rlogin are unaffected by this issue.

Extended Description

A problem with the way login parses arguments as passed by rlogind that may allow access to the root account.

Affected Products

Ibm aix

References

BugTraq: 458

CVE: CVE-1999-0113

Short Name
RLOGIN:USER:ROOT-ACCESS
Severity
Minor
Recommended
False
Recommended Action
None
Category
RLOGIN
Keywords
Access CVE-1999-0113 Multiple Root User bid:458
Release Date
02/07/2013
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Ibm

CVSS Score

10.0

Found a potential security threat?