Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/11/1999 Updated: 17/08/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

CC Whois program whois.cgi allows remote malicious users to execute commands via shell metacharacters in the domain entry.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cc cc whois 1.0

source: wwwsecurityfocuscom/bid/2000/info Whois scripts provide InterNIC lookup services via HTTP The vulnerable scripts include versions of Matt's Whois and CGI City Whois Older versions of these fail to filter metacharacters, allowing execution of arbitrary commands by embedding the commands in the domain name to lookup Specifically, ...

NVD-CWE-Other https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0985 https://nvd.nist.gov https://www.exploit-db.com/exploits/20433/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-1999-0985

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect