CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux…

published February 4, 2000

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
54%
Percentile
99.0
In the wild
Unconfirmed
What it is

🚨 A sneaky Trojan Horse has slipped in through several popular software distribution points, and it’s hiding in some unexpected places! Think of it like a trusted delivery service mistakenly dropping off a package filled with jelly-filled donuts instead of the vital tools you ordered for your workshop — unexpected, alarming, and could ruin your day! If this Trojan Horse goes undetected, it could allow attackers to manipulate or gain control over your system, leading to compromised data or even complete takeover. The ramifications could be absolutely devastating!

Put simply

Think of it like a trusted delivery service mistakenly dropping off a package filled with jelly-filled donuts instead of the vital tools you ordered for your workshop — unexpected, alarming, and could ruin your day! This vulnerability arises when a legitimate piece of software is replaced with a malicious version during distribution. In this case, popular software like TCP Wrappers, util-linux, and OpenSSH were affected, potentially allowing unauthorized access or system modifications.

What to do

If this Trojan Horse goes undetected, it could allow attackers to manipulate or gain control over your system, leading to compromised data or even complete takeover. The ramifications could be absolutely devastating! Review your systems for any installation of the affected versions: TCP Wrappers 7.6, util-linux 2.9g, and others. If found, replace them with official, verified versions from trusted sources and consider conducting a thorough security audit. Don’t forget to patch your systems regularly! This is fixable! Stay vigilant, and you'll keep your system safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.54244 · 99.0th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux…
    cvelistv5