CVE-1999-1270

Published Sep 12, 2001 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-1251 KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 5:11 PM
Reserved
Aug 31, 2001, 12:00 AM
Status
Modified
Published
Jul 11, 1998, 4:00 AM
Modified
Apr 16, 2026, 12:27 AM