Vulnerability in Proftpd_project Proftpd

CVE-1999-1475

ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.

EPSS: 0.045 (90.4th percentile) — read the EPSS interpretation.

Affected products

Proftpd_project Proftpd — versions 1.2
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)