Unscored severity · published Jul 15, 1997
CVE-1999-0146
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as…
–
CVSS
14.9%
EPSS
No
On KEV
Description
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Campas · Ncsa
All versions, or not specified · source: NVD
SE
Servers · Ncsa
All versions, or not specified · source: NVD