Remote Code Execution Vulnerability in Ray Chan WWW Authorization Gateway
CVE-1999-1436

Currently unrated

Key Information:

Vendor: Ray Chan
Status: Www Authorization Gateway
Vendor: CVE Published:; 8 July 1998

What is CVE-1999-1436?

The Ray Chan WWW Authorization Gateway 0.1 is vulnerable to a remote code execution attack due to improper sanitization of user input. This vulnerability allows attackers to inject shell metacharacters in the 'user' parameter, enabling them to execute arbitrary commands on the server. Proper validation and sanitization measures should be implemented to mitigate this risk. More detail can be found in the references provided.

References

http://marc.info/?l=bugtraq&m=90221104525905&w=2

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/152

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Aug 31, 2001
Vulnerability published
Jul 8, 1998

CVE-1999-1436 Data

JSON