CVE-1999-1195

critical

Description

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1176

http://www.securityfocus.com/bid/169

http://marc.info/?l=ntbugtraq&m=92587579032534&w=2

http://marc.info/?l=bugtraq&m=92588169005196&w=2

Details

Source: Mitre, NVD

Published: 1999-05-05

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01531