CVE-1999-0947

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Nov 2, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09487.2Buffer overflow in uum program for Canna input system allows local users to gain root privileges.CVE-1999-09497.2Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.CVE-1999-095010.0Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested dire CVE-1999-095110.0Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.CVE-1999-09527.2Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.CVE-1999-095310.0WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.CVE-1999-09547.5WWWBoard has a default username and default password.CVE-1999-09637.2FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.CVE-1999-09647.2Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variab CVE-1999-09705.0The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number o CVE-1999-09727.5Buffer overflow in Xshipwars xsw program.CVE-1999-097310.0Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in ver