CVE Catalog

CVE-1999-1171

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.89%

91th percentile - higher than 91% of all known CVEs

Summary

IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the 'flags' registry key to 1920.

Risk Assessment

Local users may gain unauthorized access to mail accounts, potentially leading to data breaches or abuse.

Recommendation

It is recommended to monitor and restrict access to the registry and to update WS_FTP software to mitigate this vulnerability.

Original NVD description (English source)

IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS