CVE-1999-1278

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 25, 1998
Updated: Nov 20, 2024

Summary

CVE-1999-1278 is a vulnerability affecting nlog CGI scripts. The issue lies in the scripts' failure to filter shell metacharacters from the IP address argument. An attacker can exploit this flaw by manipulating the IP address input, leading to potential execution of certain commands through the use of nlog-smb.pl or rpc-nlog.pl. This vulnerability poses a significant risk to systems running these nlog scripts and requires immediate attention to apply relevant patches or mitigations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share