CVE-1999-0380

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1999-02-25 · updated 2026-06-16

Description

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.

Affected products

Seattle Lab Software Slmail: 3.0.2421

References

http://marc.info/?l=bugtraq&m=91996412724720&w=2
http://marc.info/?l=ntbugtraq&m=91999015212415&w=2
http://marc.info/?l=ntbugtraq&m=92110501504997&w=2
http://www.securityfocus.com/bid/497
https://exchange.xforce.ibmcloud.com/vulnerabilities/5392
http://marc.info/?l=bugtraq&m=91996412724720&w=2
http://marc.info/?l=ntbugtraq&m=91999015212415&w=2
http://marc.info/?l=ntbugtraq&m=92110501504997&w=2
http://www.securityfocus.com/bid/497
https://exchange.xforce.ibmcloud.com/vulnerabilities/5392

Get alerted when CVE-1999-0380 or the next vulnerability affects your stack