CVE Catalog

CVE-1999-1067

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.32%

67th percentile - higher than 67% of all known CVEs

Summary

The SGI MachineInfo CGI program, installed by default on some web servers, displays potentially sensitive system status information that could be used by remote attackers for information gathering activities.

Risk Assessment

There is a risk that attackers could gain access to sensitive system information, potentially leading to further attacks on the organization's infrastructure.

Recommendation

It is recommended to remove or restrict access to the MachineInfo CGI program to minimize the risk of exposing sensitive information.

Original NVD description (English source)

SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS