CVE-1999-1053 | BDVDB-2026-2605 Detail

Description#

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/82/27296
http://www.securityfocus.com/bid/776
http://www.securityfocus.com/archive/1/33674
http://www.securityfocus.com/archive/82/27560

Exploit#

No public exploit known

History#

Version 12001-09-12Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.