CVE-1999-1051

Published: 1999-11-16

Description

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

Severity

Overall Severity: N/A

CVSS Metrics

Type Score Severity Vector

Affected Products

matt_wright - formhandler.cgi

Affected Versions:

matt_wright - formhandler.cgi

Affected Versions:

matt_wright - formhandler.cgi

Affected Versions:

References

Neural Processor Active