Test ID:	1.3.6.1.4.1.25623.1.0.900600
Category:	FTP
Title:	Anonymous FTP Login Reporting
Summary:	Reports if the remote FTP Server allows anonymous logins.
Description:	Summary: Reports if the remote FTP Server allows anonymous logins. Vulnerability Insight: A host that provides an FTP service may additionally provide Anonymous FTP access as well. Under this arrangement, users do not strictly need an account on the host. Instead the user typically enters 'anonymous' or 'ftp' when prompted for username. Although users are commonly asked to send their email address as their password, little to no verification is actually performed on the supplied data. Remark: NIST don't see 'configuration issues' as software flaws so the referenced CVE has a severity of 0.0. The severity of this VT has been raised by Greenbone to still report a configuration issue on the target. Vulnerability Impact: Based on the files accessible via this anonymous FTP login and the permissions of this account an attacker might be able to: - gain access to sensitive files - upload or delete files. Solution: If you do not want to share files, you should disable anonymous logins. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0497 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.