CVE-1999-0058

Buffer overflow in PHP cgi program, php.cgi allows shell access...

CVE-1999-0173

FormMail CGI program can be used by web servers other than the host server that the program resides on...

CVE-1999-0236

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs...

CVE-1999-0260

The jj CGI program allows command execution via shell metacharacters...

CVE-1999-0070

test-cgi program allows an attacker to list files on the server...

CVE-1999-0066

CVE-1999-0066 corresponds to a remote command execution vulnerability in the AnyForm CGI family. The Seebug entry describes AnyForm2 as vulnerable due to input validation flaws that pass unchecked user input to the SYSTEM call, enabling a remote attacker to execute arbitrary commands with the web...

CVE-1999-0172

FormMail CGI program allows remote execution of commands...

CVE-1999-0066

AnyForm CGI remote execution...

CVE-1999-0066

AnyForm CGI remote execution...

CVE-1999-0346

CGI PHP mlog script allows an attacker to read any file on the target server...

CVE-1999-0149

CVE-1999-0149 affects the IRIX “wrap” CGI program. The vulnerability allows remote attackers to perform a directory-listing traversal via a .. (dot dot) attack, exposing arbitrary directories. Multiple sources (Red Hat advisory, CVE records, NVD, Nessus plugin) corroborate that the issue stems fr...

CVE-1999-0172

The CVE-1999-0172 entry corresponds to the FormMail CGI (formmail.pl) vulnerability. Public docs describe a well-known security flaw in the FormMail CGI that lets remote attackers execute arbitrary commands on the server with the privileges of the HTTP daemon (often root or nobody). Affected comp...

CVE-1999-0174

The view-source CGI program allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0266

The info2www CGI script allows remote file access or remote command execution...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

CVE-1999-0045

CVE-1999-0045 concerns an information-disclosure flaw in the nph-test-cgi script used by some web servers, where an unauthenticated attacker can list directory contents. The Nessus plugin (NCDSA HTTPd nph-test-cgi Arbitrary Directory Listing) explains that the issue arises because the script does...

CVE-1999-0346

The CVE-1999-0346 issue concerns PHP/FI environments with the mylog.html/mlog.html files vulnerable to arbitrary file read. Affected component: PHP/FI prior to 3.0 (mylog.html/mlog.html). Root cause: flaw in the mylog.html/mlog.html handling allows reading arbitrary files on the server. Impact: r...

CVE-1999-0068

The CVE-1999-0068 issue affects PHP/FI’s mylog.html/mlog.html handling, where an arbitrary file read vulnerability allows a remote attacker to read any file on the target server via CGI PHP mylog script. The OpenVAS entries corroborate PHP/FI as affected and suggest remediation by upgrading to ve...

EUVD-1999-0045

List of arbitrary files on Web host via nph-test-cgi script...

CVE-1999-0174

Consolidated: CVE-1999-0174 is a traversal flaw in the view_source CGI that allows remote attackers to read arbitrary files via a .. sequence. Affected component: the view_source CGI program; root cause: directory traversal; impact: partial confidentiality. No patch/version details are provided i...