CVE-1999-1370

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 23, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-13717.2Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argumentCVE-1999-13724.6Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allowCVE-1999-13735.0FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.gCVE-1999-13745.0perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows CVE-1999-13755.0FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name iCVE-1999-137610.0Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.CVE-1999-13775.0Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.CVE-1999-13785.0dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.CVE-1999-13795.0DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces CVE-1999-13827.2NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gaCVE-1999-13865.5Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via CVE-1999-13934.6Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by
CVE-1999-1370: High severity, CVSS 7.2 | Vulnix