CVE-1999-1235
Last modified
CVE-1999-1235 is a vulnerability of currently unknown severity. Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | 5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-1999-1235?
How severe is CVE-1999-1235?
How do I fix CVE-1999-1235?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 1999
- CVE-1999-1223IIS 3.0 allows remote attackers to cause a denial of service…
- CVE-1999-1226Netscape Communicator 4.7 and earlier allows remote attacker…
- CVE-1999-1227Ethereal allows local users to overwrite arbitrary files via…
- CVE-1999-1231ssh 2.0.12, and possibly other versions, allows valid user n…
- CVE-1999-1233IIS 4.0 does not properly restrict access for the initial se…
- CVE-1999-1234LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to…
- CVE-1999-1236Internet Anywhere Mail Server 2.3.1 stores passwords in plai…
- CVE-1999-1237Multiple buffer overflows in smbvalid/smbval SMB authenticat…
- CVE-1999-1241Internet Explorer, with a security setting below Medium, all…
- CVE-1999-1244IPFilter 3.2.3 through 3.2.10 allows local users to modify a…
- CVE-1999-1245vacm ucd-snmp SNMP server, version 3.52, does not properly d…
- CVE-1999-1246Direct Mailer feature in Microsoft Site Server 3.0 saves use…
Are you affected by CVE-1999-1235?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST