CVE-1999-1298: High severity FreeBSD FreeBSD vulnerability
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
FreeBSD 'ftp' user (sysinstall-created)from your environment.If anonymous FTP is not required, remove the ftp user account and disable anonymous FTP to eliminate the vulnerable account.
- Configuration
Change the ftp user's shell from /bin/date to a non-login shell (for example /sbin/nologin) to prevent interactive shell execution.
FreeBSD 'ftp' user (sysinstall-created) shell = /sbin/nologin - Configuration
Set a strong password for the ftp account or lock/disable the account so it is not created with an empty password.
FreeBSD 'ftp' user (sysinstall-created) password = set or lock - Compensating control
Restrict access to the FTP service at the network perimeter (firewall/ACL) to trusted hosts or networks, or disable anonymous FTP access until the account is remediated.
- Operational
Audit systems configured with sysinstall for any ftp user accounts created with empty passwords and /bin/date as the shell; correct identified accounts by applying the above changes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1298?
The severity of CVE-1999-1298 is considered high due to the potential for unauthorized access to system resources.
How do I fix CVE-1999-1298?
To fix CVE-1999-1298, ensure that the ftp user is created with a password and change the shell to a more secure option than /bin/date.
What versions of FreeBSD are affected by CVE-1999-1298?
CVE-1999-1298 affects FreeBSD versions 2.2.1 and earlier, including specific versions like 2.1.0 to 2.2.
What are the risks associated with CVE-1999-1298?
The risks associated with CVE-1999-1298 include gaining unauthorized access to sensitive data and potential system compromise.
Is CVE-1999-1298 still relevant today?
While CVE-1999-1298 pertains to older FreeBSD versions, the underlying issues around user account security remain relevant in today's systems.