CVE-1999-1069

Medium

Published: 08/11/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.05%

94th percentile - higher than 94% of all known CVEs

Summary

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.

Risk Assessment

Attackers may gain access to sensitive data within the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update iCat Carbo Server to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.