Lucene search
HistorySep 12, 2001 - 4:00 a.m.
CVE-1999-1053
cve-1999-1053
guestbook.pl
ssi commands
apache 1.3.9
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.944 High
EPSS
Percentile
99.2%
guestbook.pl cleanses user-inserted SSI commands by removing text between “” separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides “–>”.
Affected configurations
Node
apachehttp_serverMatch1.3.9
ORmatt_wrightmatt_wright_guestbookMatch2.3
Related
cvelist
cvelist
CVE-1999-1053
2001-09-12 04:00:00
nvd
nvd
CVE-1999-1053
1999-09-13 04:00:00
nessus
nessus
Matt Wright guestbook.pl Arbitrary Command Execution
1999-12-01 00:00:00
packetstorm
packetstorm
Matt Wright guestbook.pl Arbitrary Command Execution
2009-10-30 00:00:00
openvas
openvas
guestbook.pl
2005-11-03 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.944 High
EPSS
Percentile
99.2%
Related for CVE-1999-1053