Back
CVE-1999-1235
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the…
Medium4.6EPSS 2.7%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 2.7% · top 14% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (3)
- 19990825 IE5 FTP password exposure & index.dat null ACL problem (opens in a new tab)mailing-listx_refsource_NTBUGTRAQx_transferred
- nt-ie5-user-ftp-password(3289) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 19990331 Minor Bug in IE5.0 (opens in a new tab)mailing-listx_refsource_NTBUGTRAQx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-1999-1235)Record last updated .