CVE-1999-0146 — The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file

Published Sep 29, 1999

No CVSS score

EPSS 14.94%

Description

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.

Affected products

Remediation

No remediation recorded yet.

Metrics

14.94% 0.14935

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.14935

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	14.94% (0.14935)	96.61th	v5 (v2026.06.15)
Jun 15, 2026	14.66% (0.14663)	96.22th	v5 (v2026.06.15)
Apr 21, 2026	12.94% (0.12942)	94.09th	v4 (v2025.03.14)
Oct 15, 2025	6.60% (0.06605)	90.71th	v4 (v2025.03.14)
Mar 30, 2025	5.26% (0.05263)	89.02th	v4 (v2025.03.14)
Mar 29, 2025	7.44% (0.07441)	85.95th	v4 (v2025.03.14)
Mar 17, 2025	4.58% (0.04579)	88.48th	v4 (v2025.03.14)
Dec 12, 2024	6.36% (0.06359)	93.91th	v3 (v2023.03.01)
Feb 8, 2024	6.36% (0.06359)	93.38th	v3 (v2023.03.01)
Mar 7, 2023	0.79% (0.00790)	78.83th	v3 (v2023.03.01)
Mar 6, 2023	4.19% (0.04187)	87.39th	v2 (v2022.01.01)
Apr 1, 2022	4.19% (0.04187)	86.11th	v2 (v2022.01.01)
Feb 4, 2022	4.19% (0.04187)	69.86th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/1975
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/298
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/bid/1975		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/298		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 29, 1999

Updated Aug 1, 2024

Reserved Jun 7, 1999

Link CVE-1999-0146

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-0146

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-0146