CVE Catalog
CVE-1999-1337
MediumExploitation Probability (EPSS)
Low risk0.33%
24th percentile - higher than 24% of all known CVEs
Summary
The FTP client in Midnight Commander (mc) before version 4.5.11 stores usernames and passwords for visited sites in plaintext in a world-readable history file.
Risk Assessment
Other local users can access the credentials, potentially leading to unauthorized access to systems and resources.
Recommendation
It is recommended to update Midnight Commander to version 4.5.11 or later and restrict access to the history file.
Original NVD description (English source)
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.