CVE-1999-0527

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-05287.5A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.CVE-1999-05297.5A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.CVE-1999-053010.0A system is operating in "promiscuous" mode which allows it to perform packet sniffing.CVE-1999-053910.0A trust relationship exists between two Unix hosts.CVE-1999-054710.0An SSH server allows authentication through the .rhosts file.CVE-1999-054810.0A superfluous NFS server is running, but it is not importing or exporting any file systems.CVE-1999-05497.2Windows NT automatically logs in an administrator upon rebooting.CVE-1999-055410.0NFS exports system-critical data to the world, e.g. / or a password file.CVE-1999-055510.0A Unix account with a name other than "root" has UID 0, i.e. root privileges.CVE-1999-055610.0Two or more Unix accounts have the same UID.CVE-1999-055910.0A system-critical Unix file or directory has inappropriate permissions.CVE-1999-056010.0A system-critical Windows NT file or directory has inappropriate permissions.