CVE-1999-0868: High severity ISC inn vulnerability
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
ucbmailfrom your environment.Uninstall or disable the ucbmail component if it is not required to eliminate the command-injection vector.
- Compensating control
Block or restrict untrusted inputs from INN to ucbmail (allow only trusted INN hosts/sources). Filter or sanitize data received from INN to remove shell metacharacters before it is passed to ucbmail, or isolate ucbmail behind network controls to prevent remote exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0868?
CVE-1999-0868 is considered a high-severity vulnerability due to the potential for remote command execution.
How do I fix CVE-1999-0868?
To fix CVE-1999-0868, it's recommended to upgrade to the latest versions of ucbmail or affected software that patches this vulnerability.
Which software is affected by CVE-1999-0868?
CVE-1999-0868 affects ISC INN version 1.5.1, Netscape News Server 1.1, and several NEC Goah Network and IntraSV versions.
Can CVE-1999-0868 be exploited remotely?
Yes, CVE-1999-0868 can be exploited remotely, allowing attackers to execute arbitrary commands via specially crafted input.
What is the impact of CVE-1999-0868 on systems?
The impact of CVE-1999-0868 is severe, as it allows attackers to execute commands on the affected system, leading to potential data compromise or full system control.