CVE-1999-0200

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jan 1, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-02055.0Denial of service in Sendmail 8.6.11 and 8.6.12.CVE-1999-022010.0Attackers can do a denial of service of IRC by crashing the server.CVE-1999-02215.0Denial of service of Ascend routers through port 150 (remote administration).CVE-1999-02225.0Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.CVE-1999-02232.1Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.CVE-1999-02245.0Denial of service in Windows NT messenger service through a long username.CVE-1999-022610.0Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.CVE-1999-02295.0Denial of service in Windows NT IIS server using ..\..CVE-1999-02315.0Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly CVE-1999-02407.5Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.CVE-1999-024310.0Linux cfingerd could be exploited to gain root access.CVE-1999-024810.0A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.