CVE-1999-1475

Published Sep 12, 2001 CVSS 2.0 · 4.6 Medium EPSS 4.4% KEV · Not listed
Description
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-1456 ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 5:18 PM
Reserved
Aug 31, 2001, 12:00 AM
Status
Modified
Published
Nov 19, 1999, 5:00 AM
Modified
Jun 16, 2026, 9:50 PM