PT-1999-1409 · Slackware · Slackware

Published 1999-12-01 · Updated 2022-08-17 · CVE-1999-0856

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Slackware version 7.0

Description The issue allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.

Recommendations For Slackware version 7.0, update to a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-1999-0856

Affected Products

Slackware

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0856 · Security Note
• https://marc.info/?l=bugtraq&m=94416739411280&w=2 · Note