CVE-1999-1237 high

Description

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (3)

• cve@mitre.org NVD Recent CVEs
• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-1999-1237 NVD Recent CVEs

  Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.

• Update Software, Mitigation M1051 - Enterprise | MITRE ATT&CK®
  web:attack.mitre.org

  This mitigation can be implemented through the following measures: Regular Operating System Updates Implementation: Apply the latest Windows security updates monthly using WSUS (Windows Server Update Services) or a similar patch management solution. Configure systems to check for updates automatically and schedule reboots during maintenance ...

  2026-05-22 20:32 UTC
• Google pushes massive Chrome security update to patch 127 flaws
  web:cyberinsider.com

  Google has released Chrome 148, one of the largest security update batches in the browser's history, patching 127 vulnerabilities.

  2026-05-22 20:32 UTC
• Microsoft Patch Tuesday, September 2025 Edition - Krebs on Security
  web:krebsonsecurity.com

  Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited ...

  2026-05-22 20:32 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-22 20:32 UTC
• WhatsApp Web
  web:web.whatsapp.com

  Log in to WhatsApp Web for simple, reliable and private messaging on your desktop. Send and receive messages and files with ease, all for free.

  2026-05-22 20:32 UTC
• Microsoft Releases Out-of-Band Security Update to Mitigate ... - CISA
  web:www.cisa.gov

  Updated October 29, 2025: CISA has updated this Alert to include revised information on vulnerable product identification, potential threat activity detections, and additional resources. Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Server Update Service (WSUS) in Windows Server (2012, 2016, 2019, 2022, and 2025), CVE -2025-59287

  2026-05-22 20:32 UTC
• February's Patch Tuesday release fixes 59 flaws ... - Computerworld
  web:www.computerworld.com

  Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...

  2026-05-22 20:32 UTC
• Microsoft KB Catalog: Updates, Issues, & Feedback - NinjaOne
  web:www.ninjaone.com

  Catalog of Microsoft KB updates with insights on performance & user sentiment. Find out what's working, what's not, & make informed decisions.

  2026-05-22 20:32 UTC
• National Vulnerability Database | NIST
  web:www.nist.gov

  NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  2026-05-22 20:32 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

  2026-05-22 20:32 UTC

Only Available for Registered Users. Sign in to view.