CVE-1999-1069
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Published Nov 8, 1997
Updated: Nov 20, 2024
Summary
CVE-1999-1069 is a directory traversal vulnerability affecting the iCat Carbo Server 3.0.0 and its carbo.dll component. This issue permits remote attackers to access arbitrary files on the server by injecting a ".." (dot dot) in the "icatcommand" parameter. By exploiting this vulnerability, an attacker can gain unauthorized access to sensitive information or execute malicious code, potentially leading to significant security risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- ICAT