Lucene search

phf CGI Script fails to guard against newline characters

🗓️ 28 Jan 2001 00:00:00Reported by CERTType

Vulnerability in phf CGI script allows newline characters, bypassing input validation and security.

Reporter	Title	Published	Views	Family All 5
Check Point Advisories	PHF CGI Program Remote Command Execution (CVE-1999-0067)	27 May 201000:00	–	checkpoint_advisories
Cvelist	CVE-1999-0067	29 Sep 199904:00	–	cvelist
Tenable Nessus	Multiple Vendor phf CGI Arbitrary Command Execution	22 Jun 199900:00	–	nessus
CVE	CVE-1999-0067	29 Sep 199904:00	–	cve
NVD	CVE-1999-0067	20 Mar 199605:00	–	nvd

Source	Link
ers	www.ers.ibm.com/tech-info/advisories/sva/1996/ERS-SVA-E01-1996:002.1.txt
ers	www.ers.ibm.com/tech-info/advisories/sva/1996/ERS-SVA-E01-1996:002.2.txt
ftp	www.ftp.auscert.org.au/pub/auscert/advisory/AA-96.01.Vulnerability.in.NCSA.Apache.CGI.example.cod
info	www.info.cert.org/pub/cert_advisories/CA-96.06.cgi_example_code

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Jan 2001 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS210

EPSS0.137