Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-1999-1255: Hyperseek Search Engine allows remote config changes

CVE-1999-1255 · published 27 years ago

Summary

The Hyperseek search engine can be tricked into running its admin script from a distance, letting an attacker alter its configuration files. This could disrupt service or expose sensitive settings. Apply the vendor’s update or restrict access to the admin interface immediately.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ccs_network	hyperseek_search_engine	<= 2000 `cpe:2.3:a:ccs_network:hyperseek_search_engine::::::::`

Original advisory text

Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

1% chance of attack within 30 days

Timeline

Published19 Feb 1999

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-1999-1255 · NVD

Track software like this

Free during beta