CVE Catalog

CVE-1999-0913

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
9.67%

95th percentile - higher than 95% of all known CVEs

Summary

The dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and execution of arbitrary commands by an attacker.

Recommendation

It is recommended to update the dfire.cgi script or implement appropriate security measures to block the execution of commands by remote users.

Original NVD description (English source)

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS