CVE Catalog

CVE-1999-1445

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.34%

67th percentile - higher than 67% of all known CVEs

Summary

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.

Risk Assessment

Attackers may exploit this vulnerability to gain insights into the system's state, potentially leading to further attacks or system compromise.

Recommendation

It is recommended to update to the latest version of the software and to monitor logs for suspicious login attempts.

Original NVD description (English source)

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS