CVE-1999-1260

High

Published: 15/02/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.35%

68th percentile - higher than 68% of all known CVEs

Summary

mSQL (Mini SQL) version 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.

Risk Assessment

Attackers can exploit this vulnerability to gain information that may facilitate further attacks on the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update mSQL to the latest version to mitigate this vulnerability and to restrict access to queries that may disclose sensitive information.

Other vulnerabilities in mSQL 2.0.6

CVE-1999-0276High
mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.

Original NVD description (English source)

mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.