CVE-2014-3425

NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service "remote control" outage by creating a /tmp/xmosaic.pid file for every possible PID...

CVE-2014-3426

NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service "remote control" outage by creating a /tmp/Mosaic.pid file for every possible PID...

PHF CGI Program Remote Command Execution (CVE-1999-0067)

There exists a vulnerability in the sample cgi bin program, PHF, which is included with NCSA httpd, and Apache 1.0.3, an NCSA derivitive. By supplying certain characters with special meaning to the shell, arbitrary commands can be executed by remote users. In case of a successful attack, a remote...

Cherokee formatstring bug

Format string bug on syslog call and gile logging in NCSA format, cherokeeloggerncsawritestring...

CVE-1999-1090

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files...

CVE-1999-1090

CVE-1999-1090 affects the NCSA Telnet package for Macintosh and PC. The default configuration enables FTP even though there is no ftp=yes flag, allowing remote attackers to read and modify arbitrary files. The available connected documents confirm the existence and impact of this configuration is...

CVE-1999-0232

CVE-1999-0232 : Affects NCSA WebServer 1.5c; a buffer overflow leads to remote access. Connected documents confirm the vulnerability but do not provide a remediation or patch details. Exploitation status is not specified in the sources.

CVE-1999-0232

Buffer overflow in NCSA WebServer version 1.5c gives remote access...

CVE-1999-0235

Buffer overflow in NCSA WebServer 1.4.1 and below gives remote access...

CVE-1999-0235

CVE-1999-0235 - Details : A buffer overflow in NCSA WebServer (versions 1.4.1 and below) can allow remote access. The root cause is an overflow in the server’s handling of input, leading to arbitrary code execution or service compromise as described across connected records. Affected software: NC...

CVE-1999-0267

Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution...

CVE-1999-0146

The CVE-1999-0146 entry refers to the campas CGI program shipped with some NCSA httpd servers. The root cause is improper sanitization of user input in the campas CGI, enabling an attacker to execute arbitrary commands via encoded carriage return characters in the query string, demonstrated by re...

CVE-1999-0267

CVE-1999-0267 refers to a buffer overflow in the NCSA HTTP daemon v1.3 that enables remote command execution. Connected sources corroborate that the affected component is the NCSA HTTP daemon (version 1.3) and describe the vulnerability as a buffer overflow issue in handling requests. The Red Hat...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

CVE-1999-0236

The CVE-1999-0236 entry describes a vulnerability in the ScriptAlias directory handling in NCSA and Apache httpd that allowed attackers to read CGI programs. Affected software is the Apache httpd family utilizing ScriptAlias configuration; the underlying issue is directory handling enabling discl...

NCSA Campas cgi-bin Arbitrary Command Execution

The remote web server appears to be NCSA httpd. This version of the web server comes with a sample CGI script, campas, that fails to properly sanitize user input. This could allow a remote attacker to execute arbitrary commands with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...

CVE-1999-0267

Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

NCSA httpd-campas 1.2 - sample script

NCSA httpd-campas 1.2 - sample script source: https://www.securityfocus.com/bid/1975/info Campas is a sample CGI script shipped with some older versions of NCSA HTTPd, an obsolete web server package. The versions that included the script could not be determined as the server is no longer...

NCSA httpd-campas 1.2 - sample script

source: https://www.securityfocus.com/bid/1975/info Campas is a sample CGI script shipped with some older versions of NCSA HTTPd, an obsolete web server package. The versions that included the script could not be determined as the server is no longer maintained, but version 1.2 of the script itse...