CVE-1999-1344

CVE-1999-1344 affects Auto_FTP 0.2, where Auto_FTP.pl stores usernames and passwords in plaintext in the auto_ftp.conf file. The underlying issue is plaintext credential storage, enabling disclosure of credentials over the network (NVD metric: CVSSv2 v2.0 base score 7.5, HIGH). Exploitation detai...

CVE-1999-1345

CVE-1999-1345 affects the Auto_FTP 0.2 setup where the Auto_FTP.pl script uses the /tmp/ftp_tmp directory as a shared area with insecure permissions. This misconfiguration allows local users to: (1) place arbitrary files into the shared directory to be sent to the remote server, and (2) view file...