CVE-1999-1246

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-12477.2Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.CVE-1999-12545.0Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causeCVE-1999-12555.0Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action pCVE-1999-12564.6Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file CVE-1999-12592.1Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data froCVE-1999-12607.5mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server versioCVE-1999-12632.6Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that spCVE-1999-12647.5WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled.CVE-1999-12687.2Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.CVE-1999-12795.0An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders CVE-1999-12875.0Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.CVE-1999-12905.1Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbit
CVE-1999-1246: High severity, CVSS 7.5 | Vulnix