CVE-1999-1479: Critical severity Matt Wright textcounter vulnerability
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Matt Wright Textcounterfrom your environment.Uninstall the textcounter.pl script from web servers and remove any copies; disable any associated CGI handlers so the script cannot be executed.
- Configuration
Remove execute permissions (e.g., chmod -x textcounter.pl) or disable CGI execution for the directory in the web server configuration to prevent the script from running.
textcounter.pl (Matt Wright Textcounter) executable/CGI enabled = disabled - Compensating control
Until the script is removed or fixed, block or restrict access to textcounter.pl using network controls or web-server access rules (firewall rules or allowlisting by trusted IPs, or deny access to the file in the web server configuration).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1479?
CVE-1999-1479 is considered a high severity vulnerability due to its ability to allow remote command execution.
How do I fix CVE-1999-1479?
To fix CVE-1999-1479, it is recommended to upgrade to a safer version of Matt Wright's Textcounter or apply input sanitization to prevent command injection.
What software is affected by CVE-1999-1479?
CVE-1999-1479 specifically affects Matt Wright's Textcounter version 1.2.
Can CVE-1999-1479 be exploited remotely?
Yes, CVE-1999-1479 can be exploited remotely by attackers to execute arbitrary commands.
What type of vulnerability is CVE-1999-1479?
CVE-1999-1479 is a command injection vulnerability that allows attackers to manipulate input to execute shell commands.