CVE-1999-1274: iPass RoamServer 3.1 creates temporary files with world-writable permissions.

Security readout for executives and security teams

This is an old vulnerability in iPass RoamServer 3.1 involving temporary files created with world-writable permissions. The business risk is mainly for organizations still running this legacy product, where local users or processes could tamper with files the service relies on. The provided sources do not describe business impact, patch status, or active exploitation. Exposure is likely limited to environments that still run iPass RoamServer 3.1. The source bundle does not identify broader affected versions, platforms, deployment conditions, or internet-facing exposure. Treat this as a legacy exposure question, not an emergency from the available evidence. Prioritize confirming whether the product exists in the environment, then retire, isolate, or follow vendor guidance if found. Mitigation focus: Inventory systems for iPass RoamServer 3.1 installations.; Check vendor or maintainer guidance for upgrade, workaround, or retirement recommendations.; Restrict local user access on hosts running the affected software..

Prepared

Jul 1, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.