First published: Tue Sep 23 1997(Updated: )
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
NCSA HTTPD | =1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0267 is considered a critical vulnerability due to the potential for remote command execution.
To fix CVE-1999-0267, upgrade the NCSA HTTP daemon to a version later than 1.3 that is not affected by this vulnerability.
Systems running NCSA HTTP daemon version 1.3 are affected by CVE-1999-0267 and are at risk.
The potential impacts of CVE-1999-0267 include unauthorized remote command execution and a full system compromise.
A possible workaround for CVE-1999-0267 includes disabling the service or using a firewall to block access while a patch is being applied.