CVE-1999-0146 high

Description

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (3)

• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-1999-0146 NVD Recent CVEs

  The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

• cve@mitre.org NVD Recent CVEs

• CVEs and Security Vulnerabilities - OpenCVE
  web:app.opencve.io

  Explore the latest vulnerabilities and security issues in the CVE database

  2026-05-22 20:17 UTC
• CVE Vault - CVE Database & Security Research Hub
  web:cvevault.com

  CVE Vault - Search and explore Common Vulnerabilities and Exposures ( CVE ) database. Find security vulnerabilities by CVE ID, vendor, severity, and year. Stay secure with comprehensive CVE information.

  2026-05-22 20:17 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-22 20:17 UTC
• PDF CISA Insights - Cyber: Remediate Vulnerabilities for Internet ...
  web:www.cisa.gov

  If vulnerabilities cannot be remediated within the recommended timeframes, develop a remediation plan for action and coordination across the organization. The remediation plan should include: Vulnerability remediation constraints Interim mitigation actions to overcome constraints Final actions required to remediate vulnerability

  2026-05-22 20:17 UTC
• Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find
  web:www.cvefind.com

  CVE Find is a real-time vulnerability database indexing 351 731 security flaws ( CVE ) from MITRE, NVD, CISA KEV, CWE and CAPEC. 1311 new CVEs were published in the last 7 days. Data aggregated from: MITRE Corporation ( CVE , CWE, CAPEC), National Vulnerability Database - NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).

  2026-05-22 20:17 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-22 20:17 UTC
• Vertex Explosion Fix (disables face customization)
  web:www.nexusmods.com

  This mod aims to fix ( or drastically minimize) vertex explosions on shadps4 by removing certain files related to face customization that the emulator is not currently handling correctly

  2026-05-22 20:17 UTC
• National Vulnerability Database | NIST
  web:www.nist.gov

  NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  2026-05-22 20:17 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-05-22 20:17 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

  2026-05-22 20:17 UTC

Only Available for Registered Users. Sign in to view.