Lucene search

MitreCVE-1999-1345

HistorySep 12, 2001 - 4:00 a.m.

CVE-1999-1345

2001-09-1204:00:00

mitre

web.nvd.nist.gov

insecure permissions

auto_ftp 0.2

cve-1999-1345

nvd

local user access

script vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.

Affected configurations

Nvd

Node

auto_ftpauto_ftpMatch0.2

VendorProductVersionCPE
auto_ftpauto_ftp0.2cpe:2.3:a:auto_ftp:auto_ftp:0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
auto_ftp	auto_ftp	0.2	cpe:2.3:a:auto_ftp:auto_ftp:0.2:::::::*

References

marc.info/?l=bugtraq&m=93923873006014&w=2

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-1999-1345