What’s Vulnerable › Vulnerabilities

CVE-1999-0043

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 44.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1996-12-04 · updated 2026-06-16
• Weakness: CWE-78

Description

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

Affected products

• Bsdi Bsd Os: 2.1
• Caldera Openlinux: 1.0
• ISC Inn: 1.4sec, 1.4sec2, 1.4unoff3, 1.4unoff4, 1.5
• NEC Goah Intrasv: 1.1
• NEC Goah Networksv: 1.2, 2.2, 3.1
• Netscape News Server: 1.1
• RedHat Linux: 4.0, 4.1

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043

Get alerted when CVE-1999-0043 or the next vulnerability affects your stack