PT-1991-1004 · Ncsa · Ncsa Telnet

Published 1991-09-10 · Updated 2017-10-10 · CVE-1999-1090

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NCSA Telnet package for Macintosh and PC (affected versions not specified)

Description The default configuration of the NCSA Telnet package enables FTP, allowing remote attackers to read and modify arbitrary files, even though it does not include an "ftp=yes" line.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1090

Affected Products

Ncsa Telnet

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1090 · Security Note
• http://cert.org/advisories/CA-1991-15.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1844 · Note