CVE-1999-1298

Published: Apr 7, 1997Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.

Affected (6)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Up to 2.2.1
Freebsd Freebsd	Version 2.1.0
Freebsd Freebsd	Version 2.1.5
Freebsd Freebsd	Version 2.1.6
Freebsd Freebsd	Version 2.1.7
Freebsd Freebsd	Version 2.2

References (6)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/7537.php

Source: cve@mitre.org

http://www.osvdb.org/6087

Source: cve@mitre.org

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/7537.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/6087

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.