CVEvulnerability
CVE-1999-1475
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 1999-11-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
Affected configurations
• proftpd project proftpd 1.2
References
- http://www.securityfocus.com/archive/1/35483 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/812 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/35483 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/812 Patch, Vendor Advisory