CVE-1999-0856
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting...
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
Exploit likelihood
What each source reports
NVD Score used
5.0
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
- Record
CVE-1999-0856- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
- Record
CVE-1999-0856- Updated
- 2026-11-02
EUVDEUVD-1999-0837 No score
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
- Record
EUVD-1999-0837- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mphc-h5cf-cch2 No score
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting...
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
- Record
GHSA-mphc-h5cf-cch2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0856 is a medium vulnerability (CVSS 5.0) in Slackware Linux, published December 1, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. No source names a fixed version.