CVE-1999-1324
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
VAXstations running Open VMS versions 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts. This makes it easier for attackers to conduct brute force password guessing.
Risk Assessment
Organizations may be vulnerable to brute force attacks, which could lead to unauthorized access to user accounts and potential security breaches.
Recommendation
It is recommended to upgrade the system to the latest version of Open VMS and implement additional security measures, such as limiting the number of login attempts.
Original NVD description (English source)
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.