high7.5
CVE-1999-1298
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could a…
Impact
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | through 2.2.1 Versions 2.1.0, 2.1.5, 2.1.6, 2.1.7, 2.2 |