CVE-1999-0947

AN-HTTPd - Command Injection

Title source: llm
STIX 2.1

Description

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.

Exploits (1)

exploitdb WORKING POC VERIFIED
by UNYUN · textremotewindows
https://www.exploit-db.com/exploits/19587

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=94157187815629&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/762

Scores

EPSS 0.0620
EPSS Percentile 90.9%

Details

Status published
Products (1)
an/an-httpd 1.2b
Published Nov 02, 1999
Tracked Since Feb 18, 2026