CVE-1999-0172: High severity matt wright formmail vulnerability
FormMail CGI program allows remote execution of commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Matt Wright FormMailfrom your environment.Uninstall or remove the FormMail CGI from any webserver where it is installed (remove the script and related files) to eliminate the remote command execution vulnerability.
- Configuration
Disable CGI/script execution in the webserver configuration for the directory containing the FormMail installation to prevent remote command execution.
webserver (CGI execution) cgi_execution = disabled for directory hosting FormMail - Compensating control
If immediate removal or disabling is not possible, restrict access to the FormMail endpoint (for example via firewall rules, web application firewall, or webserver access controls) to trusted IPs only until the vulnerable component is removed or safely replaced.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0172?
CVE-1999-0172 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-1999-0172?
To fix CVE-1999-0172, you should upgrade to a secure version of the FormMail CGI program or apply the appropriate patches provided by the vendor.
What systems are affected by CVE-1999-0172?
CVE-1999-0172 affects versions of Matt Wright's FormMail CGI program.
What impact does CVE-1999-0172 have?
CVE-1999-0172 allows attackers to execute arbitrary commands on the server, potentially compromising the entire system.
Is CVE-1999-0172 still relevant today?
Yes, CVE-1999-0172 remains relevant as many legacy systems may still be using vulnerable versions of FormMail.