CVE-1999-0527 high

Description

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (2)

• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-1999-0527 NVD Recent CVEs

  The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.

• Microsoft Releases Out-of-Band Patch to Fix Critical RRAS RCE ...
  web:cybersecuritynews.com

  Microsoft released an out-of-band hotpatch update on March 13, 2026, addressing serious security vulnerabilities in Windows 11 versions 24H2 and 25H2.

  2026-05-22 20:24 UTC
• NVD - Search
  web:nvd.nist.gov

  Please make use of the interactive search interfaces to find information in the database!

  2026-05-22 20:24 UTC
• March 23, 2026—Hotpatch KB5085518 (OS Builds 26200.7985 and 26100.7985 ...
  web:support.microsoft.com

  This out-of-band update for Windows 11, version 25H2 and 24H2 (KB5085518) includes fixes and improvements. To learn more about differences between security updates, optional non-security preview updates, out-of-band (OOB) updates, and continuous innovation, see Windows monthly updates explained. For information on Windows update terminology, see the different types of Windows software updates ...

  2026-05-22 20:24 UTC
• WhatsApp Web
  web:web.whatsapp.com

  Log in to WhatsApp Web for simple, reliable and private messaging on your desktop. Send and receive messages and files with ease, all for free.

  2026-05-22 20:24 UTC
• Microsoft Releases Out-of-Band Security Update to Mitigate ... - CISA
  web:www.cisa.gov

  Updated October 29, 2025: CISA has updated this Alert to include revised information on vulnerable product identification, potential threat activity detections, and additional resources. Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Server Update Service (WSUS) in Windows Server (2012, 2016, 2019, 2022, and 2025), CVE -2025-59287

  2026-05-22 20:24 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-22 20:24 UTC
• Patch Tuesday | Breakdown & Updates - Ivanti
  web:www.ivanti.com

  Microsoft Patch Tuesday serves to keep software systems up to date, and Microsoft tends to have more patch updates in even months than in odd months as a general trend. What Is Patching in Windows? Patches, or fixes, serve to address system vulnerabilities after software has been released.

  2026-05-22 20:24 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-05-22 20:24 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

  2026-05-22 20:24 UTC
• Patch Tuesday May 2026: Security Updates & CVE Analysis
  web:zecurit.com

  Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

  2026-05-22 20:24 UTC

Only Available for Registered Users. Sign in to view.