VULNERABILITY INTELLIGENCE
CVE-1999-0146
CVSS score7.5 HIGH
EPSS probability14.94%
CISA KEVNot currently listed
Published1997-07-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.