CVE-1999-0493

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the...

7.5 HighPublic exploit

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.

Exploit likelihood

4.26%Down 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-1999-0493
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-1999-0493
Updated: 2026-11-02

EUVDEUVD-1999-0492 No score

Record: EUVD-1999-0492
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3fmx-7555-v8rg No score

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the...

Record: GHSA-3fmx-7555-v8rg
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying	1999-06-07

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-0493 is a high vulnerability (CVSS 7.5) in Sun Solaris, published June 7, 1999. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.26%, the 91st percentile. No source names a fixed version.