CVE-1999-0267: Buffer Overflow
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NCSA HTTPDfrom your environment.Uninstall NCSA HTTPD if the service is not required; remove the package and related binaries from affected systems.
- Configuration
Stop the NCSA HTTP daemon and disable it from starting on boot until a secure fixed release or patch is available.
NCSA HTTPD service_enabled = false - Compensating control
Block or restrict network access to the HTTP service (e.g., block port 80/related ports) using firewall rules, network ACLs, or a reverse-proxy/WAF to prevent external access to the vulnerable daemon.
- Operational
Assume possible compromise due to remote command execution: review system and application logs for suspicious activity, perform integrity checks on affected systems, and rotate any credentials, keys, or secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0267?
CVE-1999-0267 is considered a critical vulnerability due to the potential for remote command execution.
How do I fix CVE-1999-0267?
To fix CVE-1999-0267, upgrade the NCSA HTTP daemon to a version later than 1.3 that is not affected by this vulnerability.
Who is affected by CVE-1999-0267?
Systems running NCSA HTTP daemon version 1.3 are affected by CVE-1999-0267 and are at risk.
What are the potential impacts of CVE-1999-0267?
The potential impacts of CVE-1999-0267 include unauthorized remote command execution and a full system compromise.
Is there a workaround for CVE-1999-0267?
A possible workaround for CVE-1999-0267 includes disabling the service or using a firewall to block access while a patch is being applied.