CVE-1999-1235 - Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link

Back Back to CVE browser

MEDIUM

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link

Published Sep 12, 2001

4.6

MEDIUM

CVSS 2.0

EPSS 2.71%

Description

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179
mailing-listx_refsource_NTBUGTRAQ
http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html
mailing-listx_refsource_NTBUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1216
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3289
vdb-entryx_refsource_XF

Link	Providers	Tags
http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179		mailing-listx_refsource_NTBUGTRAQ
http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html		mailing-listx_refsource_NTBUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1216		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3289		vdb-entryx_refsource_XF