CVE-1999-0356

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1840%

EPSS Percentile14.13th

Published1999年1月25日

Last Modified2026年4月16日

Vulnerability Description

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.

No CPE configurations currently published for this record.

Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.

A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.

An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.