CVE-1999-0502

CVE-1999-0502 describes a critical vulnerability where Unix accounts, specifically on HP, Red Hat, and Sun systems, are configured with default, null, blank, or missing passwords. This allows unauthenticated attackers to gain unauthorized access, leading to potential compromise of confidentiality, integrity, and availability of the affected system. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, requiring no authentication. While not listed on the KEV catalog, Metasploit modules exist for brute-forcing authentication, indicating readily available exploit tools, though there is no recorded community discussion or media coverage.