CVE-1999-0498

CVE-1999-0498 describes a critical vulnerability where a Trivial File Transfer Protocol (TFTP) server is not configured to operate within a restricted directory. This misconfiguration allows an unauthenticated remote attacker to access sensitive information, such as password files, from the compromised system. With a CVSS score of 10.0 (HIGH), the vulnerability has a network attack vector, low attack complexity, and results in complete compromise of confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.