Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2001-09-12T04:00:00

Updated: 2016-10-17T13:57:01

Reserved: 2001-08-31T00:00:00


Link: CVE-1999-1345

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 1999-10-05T04:00:00.000

Modified: 2016-10-18T02:03:15.637


Link: CVE-1999-1345

JSON object: View

cve-icon Redhat Information

No data.