7.5
CVSSv2

CVE-1999-1298

Published: 07/04/1997 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Sysinstall in FreeBSD 2.2.1 and previous versions, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow malicious users to gain access to certain system resources.

Vulnerable Product Search on Vulmon Subscribe to Product

freebsd freebsd 2.1.0

freebsd freebsd 2.1.5

freebsd freebsd 2.1.6

freebsd freebsd 2.1.7

freebsd freebsd 2.2

freebsd freebsd