CVE-1999-1090: Ncsa Telnet

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.

Affected products

• Ncsa Telnet: any version

Published 1991-09-10. Last modified 2026-06-16.