CVE-1999-1050: Medium severity matt wright formhandler.cgi vulnerability
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the replymessageattach attachment parameter, or (2) by specifying the filename as a template.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Matt Wright FormHandler.cgifrom your environment.Remove/uninstall FormHandler.cgi from the web server if the script is not required.
- Configuration
Disable attachment handling via the reply_message_attach parameter if not required; otherwise validate and canonicalize the provided filename and reject any input containing '..' or path separator characters to prevent directory traversal.
Matt Wright FormHandler.cgi reply_message_attach handling = disable or sanitize (disallow ".." and path separators) - Configuration
Prevent specifying arbitrary filenames as templates. Disable filename-as-template functionality if possible, or enforce a strict whitelist of allowed template names and validate input against it.
Matt Wright FormHandler.cgi template filename usage = disabled or restricted to whitelist - Compensating control
Restrict access to FormHandler.cgi to trusted IPs or internal networks via firewall/ACLs, and deploy a web application firewall or request filtering to block requests containing '..' or other path-traversal patterns in parameters such as reply_message_attach or template names.
- Operational
Review web server and application logs for requests to FormHandler.cgi containing '..' or attempts to read arbitrary files; investigate and remediate any indications of successful exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1050?
CVE-1999-1050 is considered a high severity vulnerability due to its potential for unauthorized file access.
What systems are affected by CVE-1999-1050?
CVE-1999-1050 affects Matt Wright FormHandler.cgi versions 1.0, 2.0, and 3.0.
How do I fix CVE-1999-1050?
To fix CVE-1999-1050, you should upgrade to a version of FormHandler.cgi that is free of this vulnerability.
What type of vulnerability is CVE-1999-1050?
CVE-1999-1050 is a directory traversal vulnerability that allows attackers to read arbitrary files.
What can attackers do with CVE-1999-1050?
Attackers can exploit CVE-1999-1050 to access sensitive files on the server by manipulating the attachment parameters.