CVE-1999-1275

Medium

Published: 08/09/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file with insecure permissions.

Risk Assessment

Local users can access the password, allowing them to gain elevated privileges in the system.

Recommendation

It is recommended to secure the password file and implement encryption for stored passwords.

Original NVD description (English source)

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.