CVE-1999-1170: Medium severity Ipswitch IMail vulnerability
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the Ipswitch IMail 'flags' registry key is not set to 1920. Change its value to something other than 1920 and set registry ACLs so that only administrators can read or modify this key.
Ipswitch IMail (registry 'flags') flags (registry) = not 1920 - Compensating control
Restrict local user privileges and apply host-based controls (registry ACLs, endpoint protection, or local group policy) to prevent non-administrative users from modifying the Ipswitch IMail 'flags' registry key.
- Operational
Audit Ipswitch IMail mail accounts and privileges for any unauthorized additions or modifications made while the 'flags' key may have been set to 1920; revert unauthorized changes and rotate any affected credentials.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1170?
CVE-1999-1170 is considered to have a significant severity level due to the potential for local privilege escalation.
How do I fix CVE-1999-1170?
To fix CVE-1999-1170, ensure that the flags registry key is not set to 1920 and review user permissions.
What are the affected software versions in CVE-1999-1170?
The vulnerable software versions involved in CVE-1999-1170 include IPSwitch IMail 5.0 and specific versions of Ipswitch WS FTP Server.
Who can exploit the vulnerability in CVE-1999-1170?
CVE-1999-1170 can be exploited by local users who can modify the registry key to gain additional privileges.
What are the potential risks associated with CVE-1999-1170?
The risks associated with CVE-1999-1170 include unauthorized access to modify or create mail accounts, leading to data breaches.