CVE-1999-1246

Summary

CVE-1999-1246 is a vulnerability affecting Microsoft Site Server 3.0's Direct Mailer feature. The issue arises due to the saving of user domain names and passwords in plaintext in the TMLBQueue network share. This network share comes with insecure default permissions, enabling remote attackers to access the passwords and ultimately gain privileges. This vulnerability poses a significant risk to systems with the insecure configuration, allowing unauthorized access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.