Unscored CVE-1999-1411 EUVD-1999-1392GHSA-hj3p-73jp-r547

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which …

Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre

Description

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.

References

fsp-anon-ftp-access(7574) vdb-entry
19981128 Debian: Security flaw in FSP mailing-list
19981130 Debian: Security flaw in FSP mailing-list
316 vdb-entry
19990217 Debian GNU/Linux 2.0r5 released (fwd) mailing-list
19981126 new version of fsp fixes security flaw vendor-advisory