Lucene search
HistoryFeb 04, 2000 - 5:00 a.m.
CVE-1999-0985
cve-1999-0985
cc whois program
remote command execution
shell metacharacters
nvd.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.055 Low
EPSS
Percentile
93.2%
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Affected configurations
Node
cccc_whoisMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cc:cc_whois | cc cc whois | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.055 Low
EPSS
Percentile
93.2%
Related for CVE-1999-0985