CVEvulnerability

CVE-1999-1345

4.6 MEDIUM Published 1999-10-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-10-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.

Affected configurations

• auto ftp auto ftp 0.2

References