CVE-1999-1346
Last modified
CVE-1999-1346 is a vulnerability of currently unknown severity. PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.. EPSS estimates a 1.49% chance of exploitation in the next 30 days.
Description
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Linux | <= 6.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-1999-1346?
How severe is CVE-1999-1346?
How do I fix CVE-1999-1346?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 1999
- CVE-1999-1340Buffer overflow in faxalter in hylafax 4.0.2 allows local us…
- CVE-1999-1341Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP…
- CVE-1999-1342ICQ ActiveList Server allows remote attackers to cause a den…
- CVE-1999-1343HTTP server for Xerox DocuColor 4 LP allows remote attackers…
- CVE-1999-1344Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and pass…
- CVE-1999-1345Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as …
- CVE-1999-1347Xsession in Red Hat Linux 6.1 and earlier can allow local us…
- CVE-1999-1348Linuxconf on Red Hat Linux 6.0 and earlier does not properly…
- CVE-1999-1349NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attac…
- CVE-1999-1350ARCAD Systemhaus 0.078-5 installs critical programs and file…
- CVE-1999-1351Directory traversal vulnerability in KVIrc IRC client 0.9.0 …
- CVE-1999-1352mknod in Linux 2.2 follows symbolic links, which could allow…
Are you affected by CVE-1999-1346?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
