CVE-1999-0947

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1999-11-02 · updated 2026-06-16

Description

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.

Affected products

An-Httpd: 1.2b

References

http://marc.info/?l=bugtraq&m=94157187815629&w=2
http://www.securityfocus.com/bid/762
http://marc.info/?l=bugtraq&m=94157187815629&w=2
http://www.securityfocus.com/bid/762

Get alerted when CVE-1999-0947 or the next vulnerability affects your stack