CVE-1999-0856

Medium

Published: 01/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

59th percentile - higher than 59% of all known CVEs

Summary

A vulnerability in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.

Risk Assessment

Attackers can exploit this vulnerability to enumerate users, increasing the risk of further attacks on the system.

Recommendation

It is recommended to upgrade to a newer version of Slackware that does not contain this vulnerability and to implement additional security measures to protect user information.

Original NVD description (English source)

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.