## Description

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### ncsa - campas

Affected Versions:

- *

### ncsa - servers

Affected Versions:

- *

## References

- http://www.securityfocus.com/bid/1975
- https://exchange.xforce.ibmcloud.com/vulnerabilities/298
- http://www.securityfocus.com/bid/1975
- https://exchange.xforce.ibmcloud.com/vulnerabilities/298

Neural Processor Active