CVE-1999-1411: Debian Linux

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.

Affected products

• Debian Debian Linux: version 2.0 only

Published 1998-11-26. Last modified 2026-06-16.