CVE-1999-1345
MediumExploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
The Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp directory as a shared directory with insecure permissions, allowing local users to send arbitrary files to the remote server and view files being transferred.
Risk Assessment
Local users can exploit this vulnerability to unauthorized file uploads and access sensitive data, potentially leading to serious security breaches.
Recommendation
It is recommended to change the permissions of the /tmp/ftp_tmp directory and implement additional security measures to restrict access to this directory to authorized users.
Original NVD description (English source)
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.