CVE-1999-1298

Publication date

2002-03-09 05:00:00

Family

mitre

State

PUBLISHED

Description

Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.