CVE-1999-1417
HighExploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
Risk Assessment
The organization may be exposed to attacks that lead to denial of service and the possibility of executing unauthorized commands, which can have serious security implications.
Recommendation
It is recommended to update the server to the latest version that addresses this vulnerability and to implement appropriate logging mechanisms to prevent the logging of dangerous data.
Other vulnerabilities in AnswerBook2 (AB2) web server dwhttpd 3.1a4
Original NVD description (English source)
Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.