CVE-2001-0901

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment...

CVE-2001-0901

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment...

CVE-2001-0901

CVE-2001-0901 involves Hypermail and remote command execution via Server Side Includes (SSI). A malicious user can attach a file with a .shtml extension, which is archived on the server and can be executed by requesting the attachment’s URL, allowing arbitrary commands to run on the server. The c...

Вставка команд с помощью SSI в Hypermail (code execution)

Возможно переслать файл shtml из которого включить любой другой файл...

Hypermail SSI Vulnerability

Hypermail SSI Vulnerability qDefense Advisory Number QDAV-2001-11-1 Product: Hypermail Vendor: Hypermail Development http://www.hypermail.org Severity: Remote; Attacker may be able to execute arbitrary commands on servers that run Hypermail and SSI Vendor Status: Vendor contacted; patch released ...

CVE-2001-0901

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment...

PT-2001-2056 · Hypermail · Hypermail

Name of the Vulnerable Software and Affected Versions: Hypermail affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands on a server that supports Server Side Includes SSI by attaching a file with a .shtml extension. This attachment is then...