CVE-1999-0399
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly,...
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
Exploit likelihood
What each source reports
NVD Score used
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
- Record
CVE-1999-0399- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
- Record
CVE-1999-0399- Updated
- 2026-11-02
EUVDEUVD-1999-0399 No score
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
- Record
EUVD-1999-0399- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mcv3-c4v3-2pf4 No score
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly,...
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
- Record
GHSA-mcv3-c4v3-2pf4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0399 is a high vulnerability (CVSS 7.5) in Khaled Mardam-bey Mirc, published January 1, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.67%, the 85th percentile. No source names a fixed version.