PT-1999-1807 · Wwwcount · Wwwcount

Published 1999-12-31 · Updated 2008-09-05 · CVE-1999-1590

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: wwwcount (Count.cgi) version 2.3

Description: A directory traversal issue allows remote attackers to read arbitrary GIF files by using ".." sequences in the image parameter.

Recommendations: For version 2.3, consider restricting access to the image parameter to prevent exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-1999-1590

Affected Products

Wwwcount

References · 2

• 🔥 http://seclists.org/bugtraq/1997/Oct/0058.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1590 · Security Note