PT-1996-1004 · Isi · Inn Daemon

Published 1996-12-04 · Updated 2024-08-01 · CVE-1999-0043

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions INN daemon (innd) version 1.5

Description The issue allows command execution via shell metachars in the INN daemon using control messages such as "newgroup" and "rmgroup".

Recommendations For INN daemon version 1.5, update to a version that fixes this issue, as the current version allows command execution via shell metachars. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-1999-0043

Affected Products

Inn Daemon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0043 · Security Note
• https://t.me/cvenotify/88316 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043 · Note