National Vulnerability Database (CVE-1999-0149)

National Cyber-Alert System Vulnerability Summary: CVE-1999-0149
Orirignal release date: 1997-04-19 Source: US-CERT/NIST ### Overview The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: input Impact Type: int,sec_prot user="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: bugtraq id 373 Hyperlink: http://securityfocus.com/bid/373 External Source: ISS X-Force Name: http-sgi-wrap(290) Hyperlink: http://xforce.iss.net/static/290.php ### Vulnerable Software and Vendor IRIX (SGI) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0149