CVE-1999-0856 describes an information disclosure vulnerability in Slackware 7.0 where the login program allows remote attackers to enumerate valid usernames. This occurs because the system reports an encryption error when an account is locked or does not exist, differentiating it from a valid account. The vulnerability has a CVSS score of 5.0 (MEDIUM), indicating it can be exploited remotely with low complexity to impact data integrity (I:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0CPE matchmatch criteria | cpe:2.3:o:slackware:slackware_linux:7.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.