CVE-1999-1101

Medium

Published: 19/02/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, allowing local users to easily decrypt the passwords and gain privileges.

Risk Assessment

Weak password protection poses a risk of unauthorized access to user accounts, potentially leading to privilege escalation within the system.

Recommendation

It is recommended to implement stronger encryption for password storage and review and update the application's security configuration.

Original NVD description (English source)

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.