CVE-1999-1475

Summary

CVE-1999-1475 refers to a vulnerability in ProFTPd 1.2 when using the mod_sqlpw module. This issue results in user passwords being logged in the wtmp file. Local users can exploit this vulnerability by accessing the wtmp file through the last command, thereby gaining privileges with the obtained passwords. This security flaw poses a significant risk to systems running the affected FTP server and the mod_sqlpw module. It is crucial to update the ProFTPd installation to a version that does not have this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.