Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
> AFFECTED_PRODUCTS
Microsoft - Site Server
Version: 3.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
31/12/1999 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 14:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago