CVE-1999-1177

Medium

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.88%

85th percentile - higher than 85% of all known CVEs

Summary

Directory traversal vulnerability in nph-publish before version 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.

Risk Assessment

An attacker could exploit this vulnerability to overwrite critical files on the server, potentially leading to data loss or system compromise.

Recommendation

It is recommended to update nph-publish to the latest version to mitigate this vulnerability and implement additional security measures to prevent unauthorized access to the system.

Original NVD description (English source)

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.