PT-1999-1059 · Microsoft · Backoffice Server

Publicado 1999-02-12 · Atualizado 2018-10-12 · CVE-1999-0372

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BackOffice Server (affected versions not specified)

Description The issue concerns the installer for BackOffice Server, which includes account names and passwords in a setup file named reboot.ini. This file is not deleted after installation, potentially exposing sensitive information.

Recommendations For all affected versions, ensure the secure deletion of the reboot.ini file after installation to prevent unauthorized access to account names and passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-1999-0372

Produtos afetados

Backoffice Server

Referências · 4

• 🔥 https://exploit-db.com/exploits/19192 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0372 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005 · Nota
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004 · Nota