CVE Catalog
CVE-1999-0146
HighExploitation Probability (EPSS)
Very high risk14.66%
96th percentile - higher than 96% of all known CVEs
Summary
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
Risk Assessment
An attacker could gain access to sensitive data, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to update the web server and disable or secure the campas CGI program to prevent exploitation of this vulnerability.
Original NVD description (English source)
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.