CVE-1999-0902

FAUCET Score

CVE-1999-0902 describes a vulnerability in ypserv, specifically affecting Linux NIS installations, where local administrators can modify password tables. This high-severity vulnerability (CVSS 7.2) has a local attack vector with low complexity, allowing for complete compromise of confidentiality, integrity, and availability. Despite its age and high impact, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		All Versions ImpactedCPE matchmatch criteria	cpe:2.3:a:linux-nis:ypserv::::::::

CVSS Data

CVSS version used by this source: 2.0

7.2HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Exploitability Score

3.9

Impact Score

10.0

CvssVersion

2.0

Exploit Intelligence

EPSS Score

0.43%

Probability of exploitation in next 30 days

EPSS Percentile

35.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.0043 is in the 51st percentile among its peer group of 3,237 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc

Product: cbl2 ypserv 4.1-4 on CBL Mariner 2.0Fixed in: 4.1-4

microsoftpatch availablevia msrc

Product: 19249-16823Fixed in: 4.1-4

Vendor Advisories (1)

microsoft2000-Jan/CVE-1999-0902Important

ypserv allows local administrators to modify password tables.

Jan 2, 2000

References

exchange.xforce.ibmcloud.com / vulnerabilities/CVE-1999-0902