CVE-1999-1430: Low severity Royal daVinci vulnerability
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable password protection or encryption for the Microsoft Access .mdb data file used by Royal daVinci so that direct opening of the file requires authentication. If the application exposes a setting to secure the data file, enable it; otherwise apply an Access file-level password/encryption to the .mdb.
Royal daVinci PIM (.mdb data file) password protection = enabled - Compensating control
Restrict local access to the directory and files that store the .mdb using OS file-system ACLs and/or full-disk encryption. Ensure only authorized service accounts or administrators can read or copy the .mdb to prevent users from opening it with external tools (e.g., Microsoft Access).
- Operational
Identify existing .mdb files created by Royal daVinci and secure them immediately (apply a password/encryption or move to a protected location). Remove or re-secure any unprotected copies that users may have exported or copied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1430?
CVE-1999-1430 is considered a low-severity vulnerability due to its local access nature.
How do I fix CVE-1999-1430?
To fix CVE-1999-1430, password-protect the Microsoft Access .mdb files to prevent unauthorized access.
Who is affected by CVE-1999-1430?
Users of Royal daVinci version 1.0 are affected by CVE-1999-1430.
What types of data are exposed in CVE-1999-1430?
CVE-1999-1430 exposes data stored in Microsoft Access .mdb files without proper password protection.
Can remote users exploit CVE-1999-1430?
No, CVE-1999-1430 can only be exploited by local users with access to the file system.