CVE-1999-0200

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password

published February 4, 2000

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

⚠️ A guest account with zero security! This flaw in the Windows NT FTP server lets anyone log in using any username and password—like leaving the front door wide open for anyone to walk in! 🔓 Think of an FTP server as a cozy coffee shop where the 'guest account' is like a special VIP door that’s supposed to keep the riffraff out. But in this case, the door has no lock, and anyone can stroll in using any name they fancy, sipping on your data like it's their free refill! ☕ An attacker could slip into your FTP server and gain unrestricted access—potentially snooping around your sensitive files or uploading malicious content. This could lead to data leaks, unauthorized changes, or even a full compromise of your server!

Put simply

Think of an FTP server as a cozy coffee shop where the 'guest account' is like a special VIP door that’s supposed to keep the riffraff out. But in this case, the door has no lock, and anyone can stroll in using any name they fancy, sipping on your data like it's their free refill! ☕ This vulnerability in the Windows NT FTP server occurs when the guest account is enabled without a password, allowing any user to connect to the server with any credentials—essentially bypassing authentication entirely!

What to do

An attacker could slip into your FTP server and gain unrestricted access—potentially snooping around your sensitive files or uploading malicious content. This could lead to data leaks, unauthorized changes, or even a full compromise of your server! Disable the guest account on your FTP server immediately and set strong, unique passwords for all accounts. Consider implementing additional security measures such as using a firewall to restrict access to the FTP server. 🛡️ You've got this! With these steps, you'll secure your FTP server and keep those unwanted guests out for good! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01603 · 75.6th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password
    cvelistv5