CVEvulnerability
CVE-1999-0146
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 1997-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
Affected configurations
• ncsa campas
• ncsa servers
References
- http://www.securityfocus.com/bid/1975 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/298 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/1975 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/298 exchange.xforce.ibmcloud.com