tackers to execute commands via shell metacharacters that are passed to it from INN. NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-0868","sourceIdentifier":"cve@mitre.org","published":"1997-02-20T05:00:00.000","lastModified":"2026-06-16T21:49:13.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A0FB9EFB-F5C3-447B-A1B7-DB762F93D8F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc:*:*:*:*:*:*:*:*","matchCriteriaId":"727D196F-786C-4C50-BF72-BE9E14A243EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_intrasv:r1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6CA81EB-5910-454D-AB36-B3EF80CDC44F"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r1.2:*:*:*:*:*:*:*","matchCriteriaId":"D66E31D1-4E06-49FC-AF8C-2904F8776CDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r2.2:*:*:*:*:*:*:*","matchCriteriaId":"289D9EB9-46B7-4176-B5EC-65768A18CAC3"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"EF85EE71-0A56-4F40-A90C-976541C8F33F"}]}]}],"references":[{"url":"https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml","source":"cve@mitre.org"},{"url":"https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},