CVE-1999-1051
MediumExploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
The default configuration in the Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, only restricting access to the /etc/ directory. This enables remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
Risk Assessment
The organization is at risk of data leakage, as attackers can access system files and other sensitive information.
Recommendation
It is recommended to change the script configuration to restrict attachment access to trusted directories and conduct a security audit of the system.
Original NVD description (English source)
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.