Lucene search

K
cve[email protected]CVE-2001-1241
HistoryJul 17, 2001 - 4:00 a.m.

CVE-2001-1241

2001-07-1704:00:00
NVD-CWE-Other
web.nvd.nist.gov
15
cybersecurity
un-cgi 1.9
remote attacks
command execution
cve-2001-1241

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.069 Low

EPSS

Percentile

93.8%

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with “#!” and the desired program name.

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.069 Low

EPSS

Percentile

93.8%