CVE-1999-1053

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Sep 13, 1999
Updated: Sep 5, 2008

Summary

CVE-1999-1053 is a vulnerability affecting the guestbook.pl script. This issue arises due to the script's insufficient handling of SSI (Server Side Includes) commands. An attacker can exploit this vulnerability by inserting malicious code between the "<!--" and "-->" separators. As a result, when guestbook.pl is run on Apache 1.3.9 and potentially other versions, the attacker can execute arbitrary commands. Apache's support for various closing sequences complicates the scope of this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache Software Foundation Apache HTTP Server

Affected Vendors

  • Apache Software Foundation