CVE-1999-0380
4.6 · MEDIUMOverview
CVE-1999-0380 is a medium-severity vulnerability affecting seattle_lab_software slmail. It was published on February 25, 1999 and has a CVSS 2.0 base score of 4.6 (MEDIUM).
This vulnerability has a CVSS 2.0 base score of 4.6, rated MEDIUM. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical Description
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Remediation
Check the references section for vendor advisories and patches from seattle_lab_software. Update slmail to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
References
Frequently Asked Questions
What is CVE-1999-0380?
CVE-1999-0380 is a medium-severity vulnerability affecting seattle_lab_software slmail. It was published on February 25, 1999 and has a CVSS 2.0 base score of 4.6 (MEDIUM).
How severe is CVE-1999-0380?
This vulnerability has a CVSS 2.0 base score of 4.6, rated MEDIUM. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-1999-0380?
Check the references section for vendor advisories and patches from seattle_lab_software. Update slmail to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-1999-0380?
CyberStrike's AI-powered security agents can automatically detect CVE-1999-0380 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related MEDIUM CVEs from 1999
View all →A system-critical NETBIOS/SMB share has inappropriate access control.
FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Nets
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another conn
NetBSD allows ARP packets to overwrite static ARP entries.
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attack
Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent t
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access rest
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read