PT-1999-1619 · Microsoft · Internet Explorer

Publicado 1999-08-25 · Atualizado 2021-07-22 · CVE-1999-1235

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer version 5.0

Description The issue allows local users to read sensitive information, such as usernames and passwords for FTP servers, from another user's index.dat file. Additionally, it enables individuals who are physically observing another user to read the information from the status bar when the user moves the mouse over a link.

Recommendations For Internet Explorer version 5.0, consider clearing the URL history regularly to minimize the risk of exposing sensitive information. As a temporary workaround, users can also avoid storing sensitive information, such as usernames and passwords, in the URL history. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-1999-1235

Produtos afetados

Internet Explorer

Referências · 5

• 🔥 https://exploit-db.com/exploits/19473 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1235 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3289 · Nota
• http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179 · Nota
• http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html · Nota