CVE-1999-0656

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-16

Affected software

No affected versions have been published.

Timeline

Published: Jan 1, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-06570.0WinGate is being used.CVE-1999-066110.0A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers CVE-1999-066210.0A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.CVE-1999-066310.0A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.CVE-1999-066410.0An application-critical Windows NT registry key has inappropriate permissions.CVE-1999-066510.0An application-critical Windows NT registry key has an inappropriate value.CVE-1999-06685.1The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arb CVE-1999-06694.0The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary comm CVE-1999-06704.0Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.CVE-1999-06715.1Buffer overflow in ToxSoft NextFTP client through CWD command.CVE-1999-06725.1Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.CVE-1999-06735.1Buffer overflow in ALMail32 POP3 client via From: or To: headers.