CVE-1999-1337 - FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges

Back Back to CVE browser

MEDIUM

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges

Published Apr 2, 2003

4.6

MEDIUM

CVSS 2.0

EPSS 0.33%

Description

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://marc.info/?l=bugtraq&m=93370073207984&w=2
mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/9873.php
vdb-entryx_refsource_XF
http://www.osvdb.org/5921
vdb-entryx_refsource_OSVDB

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=93370073207984&w=2		mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/9873.php		vdb-entryx_refsource_XF
http://www.osvdb.org/5921		vdb-entryx_refsource_OSVDB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 2, 2003

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1337

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1337

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1337