medium4.6
CVE-1999-1337
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which all…
Impact
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Midnight Commander | Midnight Commander | through 4.5.11 |