Lucene search

[email protected]CVE-1999-1322

HistoryNov 12, 1998 - 5:00 a.m.

CVE-1999-1322

1998-11-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

1arcserve backup

inoculan av

plaintext passwords

user data exposure

cve-1999-1322

7.4 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.6%

JSON

The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.

CPENameOperatorVersion
microsoft:exchange_servermicrosoft exchange servereq*
broadcom:arcserve_backupbroadcom arcserve backupeq*
broadcom:inoculanbroadcom inoculaneq*

CPE	Name	Operator	Version
microsoft:exchange_server	microsoft exchange server	eq	*
broadcom:arcserve_backup	broadcom arcserve backup	eq	*
broadcom:inoculan	broadcom inoculan	eq	*

References

marc.info/?l=ntbugtraq&m=91096758513985&w=2

marc.info/?l=ntbugtraq&m=91133714919229&w=2

Social References

7.4 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

15.6%

JSON