PT-1999-1619 · Microsoft · Internet Explorer

Published 1999-08-25 · Updated 2021-07-22 · CVE-1999-1235

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer version 5.0

Description The issue allows local users to read sensitive information, such as usernames and passwords for FTP servers, from another user's index.dat file. Additionally, it enables individuals who are physically observing another user to read the information from the status bar when the user moves the mouse over a link.

Recommendations For Internet Explorer version 5.0, consider clearing the URL history regularly to minimize the risk of exposing sensitive information. As a temporary workaround, users can also avoid storing sensitive information, such as usernames and passwords, in the URL history. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-1999-1235

Affected Products

Internet Explorer

References · 5

• 🔥 https://exploit-db.com/exploits/19473 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1235 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3289 · Note
• http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179 · Note
• http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html · Note