CVE-1999-0043: OS Command Injection
First published: Wed Dec 04 1996(Updated: )
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ISC INN | =1.4sec | |
| ISC INN | =1.4sec2 | |
| ISC INN | =1.4unoff3 | |
| ISC INN | =1.4unoff4 | |
| ISC INN | =1.5 | |
| Netscape News Server | =1.1 | |
| BSDI BSD/OS | =2.1 | |
| SCO OpenLinux Server | =1.0 | |
| Red Hat Linux | =4.0 | |
| Red Hat Linux | =4.1 | |
| nec goah intrasv | =1.1 | |
| nec goah networksv | =1.2 | |
| nec goah networksv | =2.2 | |
| nec goah networksv | =3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-1999-0043?
CVE-1999-0043 is categorized with a high severity due to the potential for command execution vulnerabilities.
How do I fix CVE-1999-0043?
To mitigate CVE-1999-0043, upgrade to a non-vulnerable version of INN or apply the necessary patches provided by the maintainers.
What systems are affected by CVE-1999-0043?
CVE-1999-0043 affects different versions of the ISC INN daemon including 1.4sec, 1.4sec2, 1.4unoff3, 1.4unoff4, and 1.5.
What are the risks associated with CVE-1999-0043?
The risks of CVE-1999-0043 include unauthorized command execution, which can lead to system compromise.
Are there any workarounds for CVE-1999-0043?
Temporary mitigations for CVE-1999-0043 involve disabling the features that utilize the vulnerable control messages until an update can be applied.
- agent/type
- agent/first-publish-date
- agent/references
- agent/description
- agent/severity
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-historical
- vendor/isc
- canonical/isc inn
- version/isc inn/1.4sec
- version/isc inn/1.4sec2
- version/isc inn/1.4unoff3
- version/isc inn/1.4unoff4
- version/isc inn/1.5
- vendor/netscape
- canonical/netscape news server
- version/netscape news server/1.1
- vendor/bsdi
- canonical/bsdi bsd/os
- version/bsdi bsd/os/2.1
- vendor/caldera
- canonical/sco openlinux server
- version/sco openlinux server/1.0
- vendor/redhat
- canonical/red hat linux
- version/red hat linux/4.0
- version/red hat linux/4.1
- vendor/nec
- canonical/nec goah intrasv
- version/nec goah intrasv/1.1
- canonical/nec goah networksv
- version/nec goah networksv/1.2
- version/nec goah networksv/2.2
- version/nec goah networksv/3.1