CVE-1999-1053: High severity Apache HTTP Server vulnerability

Published Sep 13, 1999

Updated

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

Affected Software

2 affected components

Apache HTTP Server=1.3.9

Matt Wright Matt Wright Guestbook=2.3

Event History

Sep 13, 1999

CVE Published

via NVD·04:00 AM

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Sep 12, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-1053?

CVE-1999-1053 is considered a high-severity vulnerability allowing remote attackers to execute arbitrary commands.

How do I fix CVE-1999-1053?

To fix CVE-1999-1053, upgrade to a newer version of Matt Wright Guestbook and consider updating your Apache HTTP Server to a secure version.

What software is affected by CVE-1999-1053?

CVE-1999-1053 affects Matt Wright Guestbook version 2.3 and Apache HTTP Server version 1.3.9.

Can CVE-1999-1053 be exploited remotely?

Yes, CVE-1999-1053 can be exploited remotely due to improper cleansing of user-inserted commands.

Is CVE-1999-1053 still a concern today?

While CVE-1999-1053 is an older vulnerability, it remains a concern for systems still running affected software versions.