CVE-1999-0262

High

Published: 04/08/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.07%

95th percentile - higher than 95% of all known CVEs

The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

Attackers can gain full control over the system, leading to serious security breaches and data loss.

It is recommended to update Hylafax to the latest version and implement filters on metacharacters in query strings.

Original NVD description (English source)

Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.