PT-1999-1059 · Microsoft · Backoffice Server

Published 1999-02-12 · Updated 2018-10-12 · CVE-1999-0372

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BackOffice Server (affected versions not specified)

Description The issue concerns the installer for BackOffice Server, which includes account names and passwords in a setup file named reboot.ini. This file is not deleted after installation, potentially exposing sensitive information.

Recommendations For all affected versions, ensure the secure deletion of the reboot.ini file after installation to prevent unauthorized access to account names and passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-1999-0372

Affected Products

Backoffice Server

References · 4

• 🔥 https://exploit-db.com/exploits/19192 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0372 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004 · Note