CVE-1999-1497
UnknownEPSS 1.40%
Last modified
CVE-1999-1497 is a vulnerability of currently unknown severity. Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.. EPSS estimates a 1.40% chance of exploitation in the next 30 days.
Description
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ipswitch | Imail | 5.0 |
| Ipswitch | Imail | 5.0.5 |
| Ipswitch | Imail | 5.0.6 |
| Ipswitch | Imail | 5.0.7 |
| Ipswitch | Imail | 5.0.8 |
| Ipswitch | Imail | 6.0 |
References
- http://www.securityfocus.com/archive/1/39329Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/880Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/39329Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/880Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-1999-1497?
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
How severe is CVE-1999-1497?
Severity scoring for CVE-1999-1497 is pending analysis. The EPSS model estimates a 1.40% probability of exploitation in the next 30 days.
How do I fix CVE-1999-1497?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 1999
- CVE-1999-1482SVGAlib zgv 3.0-7 and earlier allows local users to gain roo…
- CVE-1999-1484Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (…
- CVE-1999-1485nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem o…
- CVE-1999-1488sdrd daemon in IBM SP2 System Data Repository (SDR) allows r…
- CVE-1999-1495xtvscreen in SuSE Linux 6.0 allows local users to overwrite …
- CVE-1999-1496Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local us…
- CVE-1999-1500Internet Anywhere POP3 Mail Server 2.3.1 allows remote attac…
- CVE-1999-1508Web server in Tektronix PhaserLink Printer 840.0 and earlier…
- CVE-1999-1509Directory traversal vulnerability in Etype Eserv 2.50 web se…
- CVE-1999-1510Buffer overflows in Bisonware FTP server prior to 4.1 allow …
- CVE-1999-1511Buffer overflows in Xtramail 1.11 allow attackers to cause a…
- CVE-1999-1512The AMaViS virus scanner 0.2.0-pre4 and earlier allows remot…
Are you affected by CVE-1999-1497?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST