National Vulnerability Database (CVE-1999-0067)

National Cyber-Alert System Vulnerability Summary: CVE-1999-0067
Orirignal release date: 1996-03-20 Source: US-CERT/NIST ### Overview CGI phf program allows remote command execution through shell metacharacters. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: bugtraq id 629 Hyperlink: http://securityfocus.com/bid/629 External Source: CERT Name: CA-96.06.cgi_example_code Hyperlink: http://www.cert.org/advisories/CA-96.06.cgi_example_code.html External Source: ISS X-Force Name: http-cgi-phf(148) Hyperlink: http://xforce.iss.net/static/148.php ### Vulnerable Software and Vendor Apache (Apache Group) httpd (NCSA) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0067