CVE-1999-1246

Summary

CVE-1999-1246 is a vulnerability affecting Microsoft Site Server 3.0. The Direct Mailer feature in this software saves user domain names and passwords in plaintext on a TMLBQueue network share. This share has insecure default permissions, enabling remote attackers to access the passwords, potentially leading to privilege escalation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.