CVE-1999-1278

Summary

CVE-1999-1278 is a vulnerability affecting nlog CGI scripts. The issue lies in the scripts' failure to adequately filter shell metacharacters from the IP address argument. An attacker can exploit this flaw by sending crafted IP addresses to the scripts, potentially executing specific commands through two affected scripts: nlog-smb.pl and rpc-nlog.pl. This vulnerability could lead to remote command execution, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.