CVE-1999-1235

Vulnerability

Internet Explorer 5.0 for Windows 2000 and Windows NT 4 stores FTP usernames and passwords in cleartext within history files, specifically index.dat located under user profile directories. These files are accessible to any user on the host due to default Everyone:Full Control permissions, bypassing traverse checking [1].

Exploitation

A local user can exploit this vulnerability by accessing another user's index.dat file. By referencing the absolute filename of the target user's history file, an attacker can read the stored FTP credentials. Additionally, an attacker observing the screen can read credentials displayed in the status bar when a user hovers over a link [1].

Impact

Successful exploitation allows a local user to obtain FTP usernames and passwords stored by other users on the same system. This can lead to unauthorized access to FTP servers and potential compromise of data stored on those servers.

Mitigation

No specific patch information is available in the provided references. Users should be cautious about entering credentials into Internet Explorer and consider alternative methods for FTP access. The vulnerability affects Internet Explorer 5.0 [1].