CVE Catalog
CVE-1999-1246
HighExploitation Probability (EPSS)
Very high risk9.21%
95th percentile - higher than 95% of all known CVEs
Summary
The Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions.
Risk Assessment
Remote attackers can read the passwords, allowing them to gain unauthorized privileges in the system.
Recommendation
It is recommended to secure the TMLBQueue network share and avoid storing passwords in plaintext.
Original NVD description (English source)
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.