CVE-1999-1475

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/35483Patch, Vendor Advisory
http://www.securityfocus.com/bid/812Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/35483Patch, Vendor Advisory
http://www.securityfocus.com/bid/812Patch, Vendor Advisory

Timeline

Published: Nov 19, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-14762.1A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems CVE-1999-14777.2Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.CVE-1999-14785.0The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that inc CVE-1999-14815.0Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/passwo CVE-1999-14827.2SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.CVE-1999-14847.5Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met CVE-1999-14856.4nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible d CVE-1999-14885.0sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.CVE-1999-14952.1xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.CVE-1999-14962.1Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the t CVE-1999-14977.2Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-ma CVE-1999-15005.0Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL com