« Volver al listado

CVE-1999-0868

Estado: ModificadaAlta (7.2)—

ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

ISC — INNNEC — Goah IntrasvNEC — Goah NetworksvNetscape — News ServerRedhat — LinuxSUN — Sparc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-1999-0868",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "1997-02-20T05:00:00.000",
  "references": [
    {
      "url": "https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN."
    }
  ],
  "lastModified": "2026-06-16T21:49:13.473",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5658CF74-5AF1-4161-BF4C-6A394F2AA164"
            },
            {
              "criteria": "cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0FB9EFB-F5C3-447B-A1B7-DB762F93D8F2"
            },
            {
              "criteria": "cpe:2.3:h:sun:sparc:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "727D196F-786C-4C50-BF72-BE9E14A243EA"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9092D88-585D-4A0C-B181-E8D93563C74B"
            },
            {
              "criteria": "cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8211154-6685-4FF0-B3ED-43A5E5763A10"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nec:goah_intrasv:r1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6CA81EB-5910-454D-AB36-B3EF80CDC44F"
            },
            {
              "criteria": "cpe:2.3:h:nec:goah_networksv:r1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D66E31D1-4E06-49FC-AF8C-2904F8776CDD"
            },
            {
              "criteria": "cpe:2.3:h:nec:goah_networksv:r2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "289D9EB9-46B7-4176-B5EC-65768A18CAC3"
            },
            {
              "criteria": "cpe:2.3:h:nec:goah_networksv:r3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF85EE71-0A56-4F40-A90C-976541C8F33F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}