Vulnerability Database

296,663

Total vulnerabilities in the database

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

  • Published: Jul 15, 1997
  • Updated: Apr 13, 2023
  • CVE: CVE-1999-0146
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ncsa / campas - -
ncsa / servers - -