Unscored severity · published Jan 4, 2000
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories
–
CVSS
0.7%
EPSS
No
On KEV
Description
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KM
K-mail · Kde
through 1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0735
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0735
www.redhat.com
http://www.redhat.com/support/errata/RHSA1999015_01.html
Exploit
http://www.securityfocus.com/bid/300
More from K-mail
–
CVE-2006-7139
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset…
–
CVE-2007-1265
KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions…
–
CVE-2002-0342
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long
–
CVE-2000-0481
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name