Lucene search
HistoryJan 22, 2001 - 5:00 a.m.
CVE-2000-0878
cve-2000-0878
mailto cgi
shell
nvd
security flaw
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Affected configurations
Node
ranson_johnsonmailto_cgi_scriptRange≤1.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| ranson_johnson:mailto_cgi_script | ranson johnson mailto cgi script | le | 1.9 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%
Related for CVE-2000-0878