CVE-1999-1237
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
Multiple buffer overflows in the SMB authentication library (smbvalid/smbval), as used in Apache::AuthenSmb and possibly other modules, allow remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.
Risk Assessment
Attackers may exploit this vulnerability to execute remote code, potentially leading to system compromise or access to sensitive data.
Recommendation
It is recommended to update to the latest version of the SMB library and review authentication configurations to minimize risk.
Original NVD description (English source)
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.