CVE-1999-1324

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ciac.llnl.gov/ciac/bulletins/d-06.shtmlBroken Link, Patch, Third Party Advisory, US Government Resource, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7225Third Party Advisory, VDB Entry
http://ciac.llnl.gov/ciac/bulletins/d-06.shtmlBroken Link, Patch, Third Party Advisory, US Government Resource, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7225Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-13257.2SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain pri CVE-1999-13277.2Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental varia CVE-1999-13287.2linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack CVE-1999-13297.2Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.CVE-1999-13304.6The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that woul CVE-1999-13312.1netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows loc CVE-1999-13322.1gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a te CVE-1999-13337.5automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands v CVE-1999-13347.5Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long R CVE-1999-13356.4snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive CVE-1999-13365.03Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC CVE-1999-13374.6FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable hist