CVEvulnerability

CVE-1999-1337

4.6 MEDIUM Published 1999-08-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-08-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.

Affected configurations

• midnight commander midnight commander (<= 4.5.11)

References