CVE-1999-0380

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 25, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-03817.2super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.CVE-1999-03827.2The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with CVE-1999-03837.5ACC Tigris allows public access without a login.CVE-1999-03844.6The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the us CVE-1999-03865.0Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server CVE-1999-03877.8A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.CVE-1999-03884.6DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.CVE-1999-03897.2Buffer overflow in the bootp server in the Debian Linux netstd package.CVE-1999-03907.2Buffer overflow in Dosemu Slang library in Linux.CVE-1999-03917.5The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response an CVE-1999-03925.0Buffer overflow in Thomas Boutell's cgic library version up to 1.05.CVE-1999-03935.0Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.