CVE-1999-0856

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published: Dec 1, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-08572.1FreeBSD gdc program allows local users to modify files via a symlink attack.CVE-1999-08585.0Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) s CVE-1999-08592.1Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.CVE-1999-08602.1Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.CVE-1999-08612.6Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.CVE-1999-08622.1Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file CVE-1999-08634.6Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.CVE-1999-08647.2UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.CVE-1999-08655.0Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.CVE-1999-08667.2Buffer overflow in UnixWare xauto program allows local users to gain root privilege.CVE-1999-08675.0Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.CVE-1999-08727.2Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.