CVE-1999-1470

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 24, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-14725.0Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses DynamCVE-1999-14735.0When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to thCVE-1999-14747.5PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through thCVE-1999-14754.6ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwordsCVE-1999-14762.1A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systemsCVE-1999-14777.2Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.CVE-1999-14785.0The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that incCVE-1999-14815.0Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/passwoCVE-1999-14827.2SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.CVE-1999-14847.5Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the metCVE-1999-14856.4nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible dCVE-1999-14885.0sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
CVE-1999-1470: Medium severity, CVSS 4.6 | Vulnix