Detections
Analytics
rsh NULL Login Remote Privilege Escalation
high Nessus Plugin ID 10096
Synopsis
Arbitrary commands can be run on this host.Description
It is possible to execute arbitrary command on this host using rsh by supplying a NULL username.Solution
Configure rsh properly or disable it.Plugin Details
Severity: High
ID: 10096
File Name: rsh_null.nasl
Version: 1.17
Type: remote
Family: Gain a shell remotely
Published: 7/25/2002
Updated: 8/13/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Information
Required KB Items: rsh/active
Vulnerability Publication Date: 3/11/1995
Reference Information
CVE: CVE-1999-0180