bslist.cgi Email Address Variable Arbitrary Command Execution

2004-08-2000:00:00

Tenable

www.tenable.com

The bslist.cgi script exists on this web server. Some versions of this file are vulnerable to a remote exploit.

Binary data 1645.prm

VendorProductVersionCPE
brian_stanbackbslist.cgicpe:/a:brian_stanback:bslist.cgi

Vendor	Product	Version	CPE
brian_stanback	bslist.cgi		cpe:/a:brian_stanback:bslist.cgi

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0100