CVE-1999-1337
midnight commander midnight commander: no CVSS score yet. EPSS 0.3% chance of exploitation in the next 30 days.
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- midnight_commander:midnight_commander