CVE Catalog
CVE-1999-1378
MediumExploitation Probability (EPSS)
Elevated risk1.34%
67th percentile - higher than 67% of all known CVEs
Summary
The dbmlparser.exe CGI guestbook program does not perform the chroot operation properly, allowing remote attackers to read arbitrary files.
Risk Assessment
Improper chroot operation poses a risk of unauthorized access to sensitive data on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to fix the chroot implementation in the dbmlparser.exe program and conduct a security audit of the system.
Original NVD description (English source)
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.