Lucene search

[email protected]CVE-2001-0436

HistoryJul 02, 2001 - 4:00 a.m.

CVE-2001-0436

2001-07-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

dcforum 2000

dcboard.cgi

cve-2001-0436

remote command execution

arbitrary command

vulnerability

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.246 Low

EPSS

Percentile

96.6%

JSON

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a … (dot dot) in the AZ parameter to reference the program.

CPENameOperatorVersion
dcscripts:dcforumdcscripts dcforumeq2.0
dcscripts:dcforum_2000dcscripts dcforum 2000eq1.0
dcscripts:dcforumdcscripts dcforumeq1.0
dcscripts:dcforumdcscripts dcforumeq3.0
dcscripts:dcforumdcscripts dcforumeq5.0
dcscripts:dcforumdcscripts dcforumeq6.0
dcscripts:dcforumdcscripts dcforumeq4.0

CPE	Name	Operator	Version
dcscripts:dcforum	dcscripts dcforum	eq	2.0
dcscripts:dcforum_2000	dcscripts dcforum 2000	eq	1.0
dcscripts:dcforum	dcscripts dcforum	eq	1.0
dcscripts:dcforum	dcscripts dcforum	eq	3.0
dcscripts:dcforum	dcscripts dcforum	eq	5.0
dcscripts:dcforum	dcscripts dcforum	eq	6.0
dcscripts:dcforum	dcscripts dcforum	eq	4.0

References

archives.neohapsis.com/archives/bugtraq/2001-04/0269.html

www.dcscripts.com/FAQ/sec_2001_03_31.html

www.osvdb.org/3862

www.securityfocus.com/bid/2611

exchange.xforce.ibmcloud.com/vulnerabilities/6392

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.246 Low

EPSS

Percentile

96.6%

JSON

Related for CVE-2001-0436

nessus1