CVE-2001-1241

Опубликовано: 17 июл. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:steve_grimm:un-cgi:1.0:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.1:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.2:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.3:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.4:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.5:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.6:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.7:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.8:*:*:*:*:*:*:*

cpe:2.3:a:steve_grimm:un-cgi:1.9:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02963

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-45qq-6fgw-r266

github

больше 3 лет назад