Lucene search

[email protected]CVE-1999-0372

HistoryFeb 12, 1999 - 5:00 a.m.

CVE-1999-0372

1999-02-1205:00:00

CWE-200

[email protected]

web.nvd.nist.gov

information security

backoffice server

account names

passwords

cve-1999-0372

nvd

7.3 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.8%

JSON

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.

CPENameOperatorVersion
microsoft:windows_ntmicrosoft windows nteq*
microsoft:windows_2000microsoft windows 2000eq*
microsoft:backofficemicrosoft backofficeeq4.0

CPE	Name	Operator	Version
microsoft:windows_nt	microsoft windows nt	eq	*
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:backoffice	microsoft backoffice	eq	4.0

References

support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004

docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005

7.3 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.8%

JSON