How severe is CVE-1999-1270?

CVE-1999-1270 has a CVSS 2.0 base score of 4.6, rated medium severity.

Is CVE-1999-1270 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-1999-1270?

CVE-1999-1270 affects Kde. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-1999-1270?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-1999-1270 published?

CVE-1999-1270 was published on 1998-07-11 and last updated on 2026-06-16.

CVE-1999-1270

CVE-1999-1270 is a medium-severity vulnerability in Kde with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.6)
EPSS exploit prediction: 0% (23rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Kde
Published: 1998-07-11
Last modified: 2026-06-16

Description

KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.

Frequently asked questions

What is CVE-1999-1270?: KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.
How severe is CVE-1999-1270?: CVE-1999-1270 has a CVSS 2.0 base score of 4.6, rated medium severity.
Is CVE-1999-1270 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-1999-1270?: CVE-1999-1270 affects Kde. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-1999-1270?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-1999-1270 published?: CVE-1999-1270 was published on 1998-07-11 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*

More vulnerabilities in Kde

CVE-2005-0011 — Critical (CVSS 10.0): Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument…
CVE-2004-0888 — Critical (CVSS 10.0): Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and…
CVE-2004-0889 — Critical (CVSS 10.0): Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to…
CVE-2003-0690 — Critical (CVSS 10.0): KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers…
CVE-2008-1670 — Critical (CVSS 9.3): Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to…
CVE-2004-1125 — Critical (CVSS 9.3): Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as…

All CVEs affecting Kde →