Vulnerability in Freebsd

CVE-1999-1298

Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 2.1.0, 2.1.5, 2.1.6
  • N/a — versions n/a

References