CVE-1999-1411
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user...
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
Exploit likelihood
What each source reports
NVD Score used
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
- Record
CVE-1999-1411- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
- Record
CVE-1999-1411- Updated
- 2026-11-02
EUVDEUVD-1999-1392 No score
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
- Record
EUVD-1999-1392- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hj3p-73jp-r547 No score
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user...
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
- Record
GHSA-hj3p-73jp-r547- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1411 is a high vulnerability (CVSS 7.5) in Debian Linux, published November 26, 1998. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. No source names a fixed version.
References
iss.net/security_center/static/7574.php
marc.info?l=bugtraq&m=91228908407679&w=2
securityfocus.com/bid/316
lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html
nvd.nist.gov/vuln/detail/CVE-1999-1411
github.com/advisories/GHSA-hj3p-73jp-r547