CVEvulnerability
CVE-1999-1246
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 1999-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
Affected configurations
• microsoft site server 3.0
References
- http://support.microsoft.com/support/kb/articles/Q229/9/72.asp Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2068 exchange.xforce.ibmcloud.com
- http://support.microsoft.com/support/kb/articles/Q229/9/72.asp Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2068 exchange.xforce.ibmcloud.com