CVE-1999-0146

Published: Jul 15, 1997Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

Affected (2)

Products: Ncsa: Campas, Servers

Ncsa

2 products

Campas

Servers

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ncsa Campas	All versions
Ncsa Servers	All versions

References (4)

http://www.securityfocus.com/bid/1975

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/298

Source: cve@mitre.org

http://www.securityfocus.com/bid/1975

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/298

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.