CVE-1999-0043

CriticalCVSS 9.8

Published: 04/12/1996(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

44.84%

99th percentile - higher than 99% of all known CVEs

Summary

The INN daemon (innd) version 1.5 has a vulnerability that allows command execution via shell metachars in 'newgroup' and 'rmgroup' control messages, among others.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary commands on the system, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest version of INN to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.