CVE-1999-0146

The CVE-1999-0146 entry refers to the campas CGI program shipped with some NCSA httpd servers. The root cause is improper sanitization of user input in the campas CGI, enabling an attacker to execute arbitrary commands via encoded carriage return characters in the query string, demonstrated by re...

CVE-1999-0147

The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands...

CVE-1999-0264

htmlscript CGI program allows remote read access to files...

CVE-1999-0260

The jj CGI program allows command execution via shell metacharacters...

CVE-1999-0148

The IRIX environment is affected by CVE-1999-0148 due to the installed /cgi-bin/handler CGI, which has a well-known flaw that allows arbitrary command execution. The vulnerability can execute commands with the privileges of the HTTP daemon (root or nobody). Documents consistently describe it as r...

CVE-1999-0174

Consolidated: CVE-1999-0174 is a traversal flaw in the view_source CGI that allows remote attackers to read arbitrary files via a .. sequence. Affected component: the view_source CGI program; root cause: directory traversal; impact: partial confidentiality. No patch/version details are provided i...

CVE-1999-0149

CVE-1999-0149 affects the IRIX “wrap” CGI program. The vulnerability allows remote attackers to perform a directory-listing traversal via a .. (dot dot) attack, exposing arbitrary directories. Multiple sources (Red Hat advisory, CVE records, NVD, Nessus plugin) corroborate that the issue stems fr...

CVE-1999-0148: Undefined Security Weakness

The handler CGI program in IRIX allows arbitrary command execution...

CVE-1999-0147: Undefined Security Weakness

The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands...

CVE-1999-0067: Improper Neutralization of Special Elements used in an OS Command

phf CGI program allows remote command execution through shell metacharacters...

CVE-1999-0264: Undefined Security Weakness

htmlscript CGI program allows remote read access to files...

CVE-1999-0174: Undefined Security Weakness

The view-source CGI program allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0260: Undefined Security Weakness

The jj CGI program allows command execution via shell metacharacters...

CVE-1999-0172: Undefined Security Weakness

FormMail CGI program allows remote execution of commands...

NCSA 1.3/1.4.x/1.5 / Apache HTTPd 0.8.11/0.8.14 - ScriptAlias Source Retrieval

source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI programs on the web server, if a ScriptAlias directory is defined under...

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI...

CdomainFree 2.4 - Remote Command Execution

source: https://www.securityfocus.com/bid/304/info A vulnerability in a CGI program part of CdomainFree allows remote malicious users to run any executable already existing to the machine. The vulnerability is in the whoisraw.cgi program. This CGI passes user input to the shell without proper...

CdomainFree 2.4 - Remote Command Execution

CdomainFree 2.4 - Remote Command Execution source: https://www.securityfocus.com/bid/304/info A vulnerability in a CGI program part of CdomainFree allows remote malicious users to run any executable already existing to the machine. The vulnerability is in the whoisraw.cgi program. This CGI passes...

CVE-1999-0287

Vulnerability in the Wguest CGI program...

PT-1999-1032 · Wguest · Wguest

Name of the Vulnerable Software and Affected Versions: Wguest affected versions not specified Description: A vulnerability exists in the Wguest CGI program. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...