CVE Catalog

CVE-1999-1178

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.46%

70th percentile - higher than 70% of all known CVEs

Summary

Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.

Risk Assessment

Attackers may gain access to confidential data, potentially leading to further attacks on the server infrastructure.

Recommendation

It is recommended to block access to the dumpenv.pl script and update the server to the latest version to minimize risk.

Original NVD description (English source)

Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS