4.6
CVE-1999-1475
- EPSS 4.47%
- Veröffentlicht 19.11.1999 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:50:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Proftpd Project ≫ Proftpd Version1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.47% | 0.902 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://www.securityfocus.com/archive/1/35483
http://www.securityfocus.com/bid/812