PT-1991-1004 · Ncsa · Ncsa Telnet

Publicado 1991-09-10 · Atualizado 2017-10-10 · CVE-1999-1090

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NCSA Telnet package for Macintosh and PC (affected versions not specified)

Description The default configuration of the NCSA Telnet package enables FTP, allowing remote attackers to read and modify arbitrary files, even though it does not include an "ftp=yes" line.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1090

Produtos afetados

Ncsa Telnet

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/1844 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1090 · Nota de Segurança
• http://cert.org/advisories/CA-1991-15.html · Correção