A Unix account has a default, null, blank, or missing password.

published 1998-03-01 28 y ago modified 2026-06-16 4 mo ago also EUVD-1999-0500

cvss: 7.5; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 53.3%; EPSS 53.3% chance of exploitation in 30 days, percentile 98%
public exploits: 26; Metasploit, Exploit-DB

Timeline

1998-03-01 Published
1999-01-01 First public exploit (Metasploit exploit/multi/ssh/sshexec)

Exploit prediction

53.34% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/multi/ssh/sshexec SSH User Code Execution metasploit exploit, manual rank, 1999-01-01
Metasploit auxiliary/scanner/db2/db2_auth DB2 Authentication Brute Force Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/ftp/ftp_login FTP Authentication Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/dell_idrac Dell iDRAC Default Login metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/dlink_dir_300_615_http_login D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/dlink_dir_615h_http_login D-Link DIR-615H HTTP Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/dlink_dir_session_cgi_http_login D-Link DIR-300B / DIR-600B / DIR-815 / DIR-645 HTTP Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/http_login HTTP Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/joomla_bruteforce_login Joomla Bruteforce Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/tomcat_mgr_login Tomcat Application Manager Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/http/wordpress_xmlrpc_login Wordpress XML-RPC Username/Password Login Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/mysql/mysql_login MySQL Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/nntp/nntp_login NNTP Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/oracle/oracle_login Oracle RDBMS Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/pcanywhere/pcanywhere_login PcAnywhere Login Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/postgres/postgres_login PostgreSQL Login Utility metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/rservices/rexec_login rexec Authentication Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/rservices/rlogin_login rlogin Authentication Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/rservices/rsh_login rsh Authentication Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/ssh/ssh_login SSH Login Check Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/telnet/brocade_enable_login Brocade Enable Login Check Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/telnet/telnet_login Telnet Login Check Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/vmware/vmauthd_login VMware Authentication Daemon Login Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/vmware/vmware_http_login VMware Web Login Scanner metasploit auxiliary, normal rank
Metasploit auxiliary/scanner/winrm/winrm_login WinRM Login Utility metasploit auxiliary, normal rank
EDB-41694 SSH - User Code Execution (Metasploit) remote, 1999-01-01

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

References

exchange.xforce.ibmcloud.com /vulnerabilities/CVE-1999-0502

Sources

CVE List CVE-1999-0502
NVD CVE-1999-0502

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary