CVE-1999-0147

Glimpse HTTP - Remote Command Execution via aglimpse CGI

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0147. PoCs published by Razvan Dragomirescu.

AI-analyzed exploit summary The exploit leverages a command injection vulnerability in the 'aglimpse' CGI script by using the pipe metacharacter and the IFS variable to bypass space filtering, allowing arbitrary command execution. The example demonstrates sending /etc/passwd via email.

Description

The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Razvan Dragomirescu · textremoteunix
https://www.exploit-db.com/exploits/20449

The exploit leverages a command injection vulnerability in the 'aglimpse' CGI script by using the pipe metacharacter and the IFS variable to bypass space filtering, allowing arbitrary command execution. The example demonstrates sending /etc/passwd via email.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: WebGlimpse prior to 1.5, GlimpseHTTP up to and including 2.0
No auth needed
Prerequisites: Access to the vulnerable CGI script via HTTP
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0147

Scores

EPSS 0.0870
EPSS Percentile 94.5%

Details

Status published
Products (2)
university_of_arizona/glimpse_http 2.0
university_of_arizona/webglimpse < 1.5
Published Jul 01, 1997
Tracked Since Feb 18, 2026