Lucene search
HistoryJun 02, 2001 - 4:00 a.m.
CVE-2001-0216
cve-2001-0216
pals library system
remote attackers
arbitrary commands
shell metacharacters
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.5%
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
Affected configurations
Node
mnscu_palswebpalsMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mnscu_pals:webpals | mnscu pals webpals | eq | 1.0 |
Related
nvd
nvd
CVE-2001-0216
2001-06-02 04:00:00
cvelist
cvelist
CVE-2001-0216
2001-03-09 05:00:00
nessus
nessus
PALS Library System WebPALS pals-cgi Multiple Vulnerabilities
2001-02-13 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.026 Low
EPSS
Percentile
90.5%
Related for CVE-2001-0216