CVE Catalog
CVE-1999-0983
HighExploitation Probability (EPSS)
High risk2.74%
84th percentile - higher than 84% of all known CVEs
Summary
The whois.cgi program in the Whois Internic service allows remote attackers to execute commands via shell metacharacters in the domain entry.
Risk Assessment
Attackers may gain access to the system and execute arbitrary commands, potentially leading to serious security breaches.
Recommendation
It is recommended to update the whois.cgi program and implement input validation filters to prevent the injection of metacharacters.
Other vulnerabilities in whois.cgi
Original NVD description (English source)
Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.