SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-1999-0067

phf CGI program allows remote command execution through shell metacharacters.

HIGH 10.0EPSS 86.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 86.9%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

phf CGI program allows remote command execution through shell metacharacters.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
86.87% probability · 100th percentile
CISA KEV
Not listed
Weakness
CWE-78
Affected
apache/http server · ncsa/ncsa httpd
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.