Security readout for executives and security teams
Plain-English summary
CVE-1999-0902 describes a ypserv issue where local administrators could modify password tables. That threatens account integrity on systems that still rely on ypserv/NIS. The provided sources do not identify affected vendors, versions, CVSS severity, or a specific patch.
Executive priority
Treat as a legacy-system exposure question. It is not enough to rely on the CVE record; prioritize confirmation if ypserv/NIS is still used for identity or authentication.
Technical view
The record states only that ypserv allows local administrators to modify password tables. No CWE, CVSS score, affected product list, version range, exploit detail, or remediation is provided in the supplied source bundle.
Likely exposure
Exposure is most plausible where legacy ypserv/NIS remains deployed and local administrators have access. Specific vendor and version exposure cannot be confirmed from the supplied sources.
Exploitation context
The source bundle does not show CISA KEV listing or any cited evidence of active exploitation. The described prerequisite is local administrator access; no remote or unauthenticated exploitation is supported here.
Researcher notes
The public record is sparse. Do not infer affected vendors, patch levels, or exploit availability without additional vendor documentation. Validation should focus on confirming ypserv/NIS presence and local administrative control paths.
Mitigation direction
- Inventory systems running ypserv or NIS services.
- Check current vendor guidance for affected versions and fixes.
- Restrict local administrator access to trusted personnel only.
- Audit password table and NIS map change controls.
- Plan migration away from unsupported legacy NIS components where feasible.
Validation and detection
- Confirm whether ypserv is installed or running in production.
- Identify the operating system vendor and package version.
- Review vendor advisories for CVE-1999-0902 coverage.
- Check password table and NIS map integrity against known-good records.
- Review administrative change logs for unauthorized password table modifications.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Credential and access behavior lookup
The CVE wording references authentication or credential exposure, so valid-account and credential-access review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-1999-0902 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0902CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.