CVE-1999-0380
MediumExploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
SLMail versions 3.1 and 3.2 allow local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Risk Assessment
The risk is that local users can gain unauthorized access to sensitive data in the NTFS file system, potentially leading to confidentiality breaches.
Recommendation
It is recommended to disable the Remote Administration Service (RAS) or implement appropriate file access restrictions to minimize the risk of unauthorized access.
Original NVD description (English source)
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.