Unscored CVE-1999-1278 EUVD-1999-1259GHSA-hcf8-4449-wvrr

nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute ce…

Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre

Description

nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl.

References

19981226 Nlog 1.1b released - security holes fixed mailing-list
19981225 Re: Nlog v1.0 Released - Nmap 2.x log management / analyzing tool mailing-list
https://exchange.xforce.ibmcloud.com/vulnerabilities/1550 vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/1549 vdb-entry