CVE-1999-1246 | BDVDB-2026-3360 Detail

Description#

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.microsoft.com/support/kb/articles/Q229/9/72.asp
https://exchange.xforce.ibmcloud.com/vulnerabilities/2068

Exploit#

No public exploit known

History#

Version 12002-03-09Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.