CVE-1999-1475 | BDVDB-2026-2880 Detail

Description#

ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/35483
http://www.securityfocus.com/bid/812

Exploit#

No public exploit known

History#

Version 12001-09-12Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.