← Back

CVE-1999-0043

nvd nist
Published: Dec 4, 1996Modified: Apr 16, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

Affected (14)

Products: Isc: Inn · Netscape: News Server · Bsdi: Bsd Os · +3 more
Show all products
Isc: Inn · Netscape: News Server · Bsdi: Bsd Os · Caldera: Openlinux · Redhat: Linux · Nec: Goah Intrasv, Goah Networksv
Isc
1 product
Inn
Netscape
1 product
News Server
Bsdi
1 product
Bsd Os
Caldera
1 product
Openlinux
Redhat
1 product
Linux
Nec
2 products
Goah Intrasv
Goah Networksv
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Inn
Version 1.4sec2
Inn
Version 1.4sec
Inn
Version 1.4unoff3
Inn
Version 1.4unoff4
Inn
Version 1.5
News Server
Version 1.1
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Bsd Os
Version 2.1
Openlinux
Version 1.0
Redhat
Linux
Version 4.0
Linux
Version 4.1
Configuration C
4 vulnerable
Vulnerable SoftwareAffected Versions
Goah Intrasv
Version 1.1
Nec
Goah Networksv
Version 1.2
Goah Networksv
Version 2.2
Goah Networksv
Version 3.1

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.