Unscored severity · published Feb 20, 1997
CVE-1999-0868
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN
–
CVSS
1.5%
EPSS
No
On KEV
Description
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
Goah Intrasv · Nec
r1.1 · source: NVD
GN
Goah Networksv · Nec
r1.2; r2.2; r3.1 · source: NVD
IN
Inn · Isc
1.5.1 · source: NVD
LI
Linux · Redhat
4.0; 4.1 · source: NVD
NS
News Server · Netscape
1.1 · source: NVD
SP
Sparc · Sun
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0868
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0868
www.cs.ait.ac.th
https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml
More from Inn
9.8
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others
–
CVE-2012-3523
The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted…
–
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code
–
CVE-2002-0525
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string…
–
CVE-2001-1442
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument