CVE-1999-1063

The CVE-1999-1063 entry concerns the CDomain whois_raw.cgi CGI script, where the fqdn parameter accepts shell metacharacters, enabling remote attackers to execute arbitrary commands. This is evidenced by the core description and corroborated by the Nessus NASL entry for CDomainFree’s whois_raw.cg...

whois_rawcgi.txt

Date: Tue, 1 Jun 1999 00:34:51 +0200 From: Salvatore Sanfilippo -antirez- To: [email protected] Subject: whoisraw.cgi problem Hi, sorry if this has already been known. There is a problem in whoisraw.cgi, called from whois.cgi. whoisraw.cgi is part of cdomain v1.0. I don't know if new versions...