## Description

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

## Severity

Overall Severity: CRITICAL

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---
CVSS v3.1 | 9.8 | CRITICAL | `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

## Affected Products

### isc - inn

Affected Versions:

- 1.4sec

### isc - inn

Affected Versions:

- 1.4sec2

### isc - inn

Affected Versions:

- 1.4unoff3

### isc - inn

Affected Versions:

- 1.4unoff4

### isc - inn

Affected Versions:

- 1.5

### netscape - news_server

Affected Versions:

- 1.1

### bsdi - bsd_os

Affected Versions:

- 2.1

### caldera - openlinux

Affected Versions:

- 1.0

### redhat - linux

Affected Versions:

- 4.0

### redhat - linux

Affected Versions:

- 4.1

### nec - goah_intrasv

Affected Versions:

- 1.1

### nec - goah_networksv

Affected Versions:

- 1.2

### nec - goah_networksv

Affected Versions:

- 2.2

### nec - goah_networksv

Affected Versions:

- 3.1

## References

- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043

Neural Processor Active