a shell metachars in INN daemon (innd) 1.5 using \ NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-0043","sourceIdentifier":"cve@mitre.org","published":"1996-12-04T05:00:00.000","lastModified":"2026-06-16T21:47:26.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Command execution via shell metachars in INN daemon (innd) 1.5 using \"newgroup\" and \"rmgroup\" control messages, and others."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"isc","product":"inn","defaultStatus":"unknown","cpes":["cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*","cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*","cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*","cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*","cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*"],"versions":[{"version":"1.4sec","status":"affected"},{"version":"1.4sec2","status":"affected"},{"version":"1.4unoff3","status":"affected"},{"version":"1.4unoff4","status":"affected"},{"version":"1.5","status":"affected"}]},{"vendor":"netscape","product":"news_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*"],"versions":[{"version":"1.1","status":"affected"}]},{"vendor":"bsdi","product":"bsd_os","defaultStatus":"unknown","cpes":["cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*"],"versions":[{"version":"2.1","status":"affected"}]},{"vendor":"caldera","product":"openlinux","defaultStatus":"unknown","cpes":["cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0","status":"affected"}]},{"vendor":"redhat","product":"linux","defaultStatus":"unknown","cpes":["cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.0","status":"affected"}]},{"vendor":"redhat","product":"linux","defaultStatus":"unknown","cpes":["cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*"],"versions":[{"version":"4.1","status":"affected"}]},{"vendor":"nec","product":"goah_intrasv","defaultStatus":"unknown","cpes":["cpe:2.3:h:nec:goah_intrasv:1.1:*:*:*:*:*:*:*"],"versions":[{"version":"1.1","status":"affected"}]},{"vendor":"nec","product":"goah_networksv","defaultStatus":"unknown","cpes":["cpe:2.3:h:nec:goah_networksv:1.2:*:*:*:*:*:*:*","cpe:2.3:h:nec:goah_networksv:2.2:*:*:*:*:*:*:*","cpe:2.3:h:nec:goah_networksv:3.1:*:*:*:*:*:*:*"],"versions":[{"version":"1.2","status":"affected"},{"version":"2.2","status":"affected"},{"version":"3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-01T19:56:17.928328Z","id":"CVE-1999-0043","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*","matchCriteriaId":"E5D0063D-01CE-49E2-A19A-FA861F3C40CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*","matchCriteriaId":"967E86C5-3635-49FF-A98A-C9B2BC85A812"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*","matchCriteriaId":"14DBB010-4064-4B46-834C-6FD5F1FE78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*","matchCriteriaId":"EEE0D317-4F02-4896-95FC-20B64EB3A91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9915A668-8E8C-4EC8-A72A-6937EC7D3496"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A0FB9EFB-F5C3-447B-A1B7-DB762F93D8F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_intrasv:1.1:*:*:*:*:*:*:*","matchCriteriaId":"39F6E390-A2CF-4F42-83EC-65B23EC644CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:1.2:*:*:*:*:*:*:*","matchCriteriaId":"11389E13-8EE5-4C33-9A6D-4B30849F0722"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3C409173-AC55-493F-9B55-51A69D933F04"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2CC1F3C7-D016-44B4-843A-34538227668B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},