CVE-1999-0985

High

Published: 09/11/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.94%

95th percentile - higher than 95% of all known CVEs

The CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

Attackers may gain access to the system, potentially leading to server takeover or data leakage.

It is recommended to update the program to the latest version and implement input validation filters in forms.

Original NVD description (English source)

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.