CVE-1999-1069
CVSS 2.0 Score 5 of 10 (medium)
Details
Published Nov 8, 1997
Updated: Nov 20, 2024
Summary
CVE-1999-1069 is a directory traversal vulnerability affecting the iCat Carbo Server 3.0.0 and its carbo.dll component. An attacker can exploit this weakness by supplying a specially crafted icatcommand parameter containing ".." (dot dot) characters. This manipulation allows the attacker to navigate beyond the intended directory and gain unauthorized access to arbitrary files on the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- ICAT