Midnight Commander up to 4.5.10.22 FTP Client cleartext storage

Summaryinfo

A vulnerability marked as problematic has been reported in Midnight Commander up to 4.5.10.22. This affects an unknown part of the component FTP Client. The manipulation leads to cleartext storage. This vulnerability is listed as CVE-1999-1337. There is no available exploit. Adding more authentication is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Midnight Commander up to 4.5.10.22. This issue affects an unknown code of the component FTP Client. The manipulation with an unknown input leads to a cleartext storage vulnerability. Using CWE to declare the problem leads to CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.

The weakness was presented 08/01/1999 by coda as not defined posting (Bugtraq). The advisory is shared at marc.theaimsgroup.com. The identification of this vulnerability is CVE-1999-1337. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1555 for this issue. The CPE assignment and the CVE summary mismatch regarding the version.

After 51 minutes, there has been an exploit disclosed.

It is possible to mitigate the problem by adding an authentication mechanism.

The vulnerability is also documented in the databases at X-Force (9873) and OSVDB (5921†). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Name

• Midnight Commander

Version

• 4.5.10.0
• 4.5.10.1
• 4.5.10.2
• 4.5.10.3
• 4.5.10.4
• 4.5.10.5
• 4.5.10.6
• 4.5.10.7
• 4.5.10.8
• 4.5.10.9
• 4.5.10.10
• 4.5.10.11
• 4.5.10.12
• 4.5.10.13
• 4.5.10.14
• 4.5.10.15
• 4.5.10.16
• 4.5.10.17
• 4.5.10.18
• 4.5.10.19
• 4.5.10.20
• 4.5.10.21
• 4.5.10.22

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion