1. CVE-Search
  2. CVE-1999-0043
ID CVE-1999-0043
Summary Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
References
Vulnerable Configurations
  • cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*
    cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*
  • cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*
    cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*
  • cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*
    cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*
  • cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*
    cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*
  • cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*
  • cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*
    cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*
    cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*
  • cpe:2.3:h:nec:goah_networksv:2.2:*:*:*:*:*:*:*
    cpe:2.3:h:nec:goah_networksv:2.2:*:*:*:*:*:*:*
  • cpe:2.3:h:nec:goah_networksv:1.2:*:*:*:*:*:*:*
    cpe:2.3:h:nec:goah_networksv:1.2:*:*:*:*:*:*:*
  • cpe:2.3:h:nec:goah_intrasv:1.1:*:*:*:*:*:*:*
    cpe:2.3:h:nec:goah_intrasv:1.1:*:*:*:*:*:*:*
  • cpe:2.3:h:nec:goah_networksv:3.1:*:*:*:*:*:*:*
    cpe:2.3:h:nec:goah_networksv:3.1:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 17-08-2022 - 07:15)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
cert CA-97.08.innd
xf inn-controlmsg
Last major update 17-08-2022 - 07:15
Published 04-12-1996 - 05:00
Last modified 17-08-2022 - 07:15
Back to Top