Vulnerability Description
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Midnight Commander | Midnight Commander | <= 4.5.11 |
References
- http://marc.info/?l=bugtraq&m=93370073207984&w=2
- http://www.iss.net/security_center/static/9873.php
- http://www.osvdb.org/5921
- http://marc.info/?l=bugtraq&m=93370073207984&w=2
- http://www.iss.net/security_center/static/9873.php
- http://www.osvdb.org/5921
FAQ
What is CVE-1999-1337?
CVE-1999-1337 is a vulnerability with a CVSS score of 4.6 (MEDIUM). FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
How severe is CVE-1999-1337?
CVE-1999-1337 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1337?
Check the references section above for vendor advisories and patch information. Affected products include: Midnight Commander Midnight Commander.