high7.5Public exploit code
CVE-1999-0146
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NCSA httpd-campas 1.2 - sample script1997-07-15 · remote · cgi · Verified
Impact
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncsa | Campas | All versions |
| Ncsa | Servers | All versions |