CVE Catalog

CVE-1999-0174

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
6.90%

93th percentile - higher than 93% of all known CVEs

Summary

The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to a breach of confidentiality within the organization.

Recommendation

It is recommended to block access to the view-source CGI program or implement appropriate security measures to prevent .. (dot dot) attacks.

Original NVD description (English source)

The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS