VULNERABILITY INTELLIGENCE
CVE-1999-1337
CVSS score4.6 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published1999-08-01
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.