Vulnerability in Nlog

CVE-1999-1278

nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl.

EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.

Affected products

  • Nlog
  • N/a — versions n/a

References