CVE-1999-1377: Medium severity Matt Wright download.cgi vulnerability
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Download.cgifrom your environment.If the script is not required, uninstall or remove Download.cgi from the server to eliminate the vulnerable component until a safe replacement or patch is available.
- Configuration
Validate and canonicalize the f parameter on the server side. Reject or sanitize any '..' (dot-dot) sequences and ensure resolved paths remain within the intended download directory (perform a chroot-like check or compare canonical paths before file access).
Download.cgi f parameter (file path) validation = disallow '..' sequences; canonicalize paths and restrict to intended directory - Compensating control
Until a code fix is applied, restrict access to Download.cgi (for example, limit to trusted IP addresses via firewall/ACLs or require strong authentication) to reduce exposure to remote attackers.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1377?
CVE-1999-1377 is considered to have a high severity due to its ability to allow remote attackers to read arbitrary files.
How do I fix CVE-1999-1377?
To fix CVE-1999-1377, ensure that you upgrade to a patched version of download.cgi or implement proper input validation to prevent directory traversal attacks.
What type of attack does CVE-1999-1377 facilitate?
CVE-1999-1377 facilitates directory traversal attacks that enable unauthorized file access on the server.
Which version of download.cgi is affected by CVE-1999-1377?
CVE-1999-1377 affects version 1.0 of Matt Wright's download.cgi.
Who is the vendor associated with CVE-1999-1377?
The vendor associated with CVE-1999-1377 is Matt Wright.