CVE-1999-0346: Medium severity PHP Php Fi vulnerability
CGI PHP mlog script allows an attacker to read any file on the target server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
CGI PHP mlog scriptfrom your environment.Remove or delete the CGI PHP mlog script from the server/webroot if it is not required.
- Configuration
Disable the CGI PHP mlog script in the web server or PHP configuration so it cannot be executed.
PHP CGI mlog script enabled = false - Compensating control
Restrict access to the CGI PHP mlog script to trusted IP addresses using firewall rules or web server access controls (allowlist) until the script is removed or a fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0346?
CVE-1999-0346 has a moderate severity level due to its ability to allow unauthorized file access on the server.
How does CVE-1999-0346 work?
CVE-1999-0346 exploits a vulnerability in the CGI PHP mlog script that permits attackers to read any file on the server.
Who is affected by CVE-1999-0346?
CVE-1999-0346 affects systems using vulnerable versions of PHP with the CGI mlog script installed.
How do I fix CVE-1999-0346?
To fix CVE-1999-0346, ensure you remove or update the vulnerable CGI PHP mlog script to a secured version.
What are the potential impacts of CVE-1999-0346?
The potential impacts of CVE-1999-0346 include unauthorized access to sensitive files and information leakage from the server.