Unscored severity · published Dec 5, 1999
CVE-1999-0990
Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system
–
CVSS
0.4%
EPSS
No
On KEV
Description
Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdm · Gnome
2.0_beta4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0990
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0990
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0990
More from Gdm
–
CVE-2011-1709
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges…
–
CVE-2011-0727
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under…
–
CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to…
–
CVE-2007-3381
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from…
–
CVE-2006-6105
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string…