CVE-1999-1092

Medium

Published: 17/11/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Tin version 1.40 creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file.

Local users may gain access to sensitive information, posing a risk of data security breaches.

It is recommended to change the permissions of the .tin directory to restrict access to authorized users only.

Original NVD description (English source)

tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.