CVE-1999-1530
Low CVSS 3.6Published 1999-11-08 ยท last changed 2026-06-16
The fix
We hold no Microsoft remediation data for CVE-1999-1530, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.
What it is
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
Sources
CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:N