VulnerabilityModified
CVE-1999-0146
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
HIGH 7.5EPSS 14.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.9%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 14.94% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- ncsa/campas · ncsa/servers
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.