CVE-1999-1411
First published: Thu Nov 26 1998(Updated: )
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian Linux | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/316
- http://lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html
- http://www.iss.net/security_center/static/7574.php
- http://marc.info/?l=bugtraq&m=91228908407679&w=2
- http://marc.info/?l=bugtraq&m=91936850009861&w=2
- http://marc.info/?l=bugtraq&m=91244712808780&w=2
Frequently Asked Questions
What is the severity of CVE-1999-1411?
CVE-1999-1411 is considered a moderate severity vulnerability.
How do I fix CVE-1999-1411?
To fix CVE-1999-1411, ensure that the anonymous FTP user is disabled in the FTP server configuration.
What systems are affected by CVE-1999-1411?
CVE-1999-1411 affects the Debian GNU/Linux 2.0 operating system specifically due to the fsp package installation.
What risks are posed by CVE-1999-1411?
CVE-1999-1411 poses risks of unauthorized file access through enabled anonymous FTP.
Is there a workaround for CVE-1999-1411?
A possible workaround for CVE-1999-1411 is to monitor FTP server logs to identify unauthorized access attempts.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- collector/nvd-index
- vendor/debian
- canonical/debian linux
- version/debian linux/2.0