What’s Vulnerable › Vulnerabilities

CVE-1999-1270

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1998-07-11 · updated 2026-06-16

Description

KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.

Affected products

• Kde: 1.0

References

• http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1639
• http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1639

Get alerted when CVE-1999-1270 or the next vulnerability affects your stack