CVE-1999-1053

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/33674Vendor Advisory
http://www.securityfocus.com/archive/82/27296Exploit, Vendor Advisory
http://www.securityfocus.com/archive/82/27560Vendor Advisory
http://www.securityfocus.com/bid/776Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/33674Vendor Advisory
http://www.securityfocus.com/archive/82/27296Exploit, Vendor Advisory
http://www.securityfocus.com/archive/82/27560Vendor Advisory
http://www.securityfocus.com/bid/776Exploit, Patch, Vendor Advisory

Timeline

Published: Sep 13, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-10557.5Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by CVE-1999-10587.5Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com CVE-1999-10605.0Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary comman CVE-1999-106310.0CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.CVE-1999-106410.0Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary com CVE-1999-10657.5Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands CVE-1999-10665.0Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the s CVE-1999-10747.5Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attacker CVE-1999-10764.6Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option an CVE-1999-10774.6Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or C CVE-1999-10787.5WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords CVE-1999-10794.6Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.