CVE-1999-0661: A system is running a version of software that was replaced with a Trojan Horse at one of its distribution...

Security readout for executives and security teams

Attackers replaced legitimate copies of popular open-source software on official download sites with tampered "Trojan Horse" versions. Anyone who downloaded and installed the compromised builds during the affected windows unknowingly ran attacker-controlled code, which could give outsiders access to the machine. Named examples include TCP Wrappers, util-linux, wu-ftpd, ircII, OpenSSH 3.4p1, and Sendmail 8.12.6. Exposure is limited to systems that installed the specific affected builds during the brief tampering windows described in the referenced CERT advisories. Environments still running unpatched, legacy Unix hosts derived from those downloads may retain residual risk. Modern systems using current, signature-verified packages are not affected. Low operational priority for modern estates, but a useful teaching case: this CVE is the archetype of a software supply-chain compromise. Treat it as a prompt to verify that today's build pipelines and download sources enforce signature checks, not as an active vulnerability requiring emergency patching. Mitigation focus: Replace any suspect legacy builds with current vendor-signed releases and verify GPG or checksum signatures.; Rebuild affected hosts from known-good media if they date to the compromise windows in the CERT advisories.; Restrict outbound egress from legacy Unix hosts to detect residual backdoor callbacks..

Prepared

Jul 12, 2026, 06:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.