CVEvulnerability

CVE-1999-1051

5.0 MEDIUM Published 1999-11-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-11-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

Affected configurations

• matt wright formhandler.cgi 1.0 • matt wright formhandler.cgi 2.0 • matt wright formhandler.cgi 3.0

References