CVE Catalog

CVE-1999-0039

HighCVSS 7.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
16.21%

97th percentile - higher than 97% of all known CVEs

Summary

The webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

Risk Assessment

Attackers can gain full control over the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to update the software to the latest version and implement input validation to block shell metacharacters.

Original NVD description (English source)

webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS