6 matches found
CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...
CVE-2001-0271
CVE-2001-0271 affects mailnews.cgi (version 1.3 and earlier). The vulnerability allows remote attackers to execute arbitrary commands by supplying a user name that contains shell metacharacters. This is a remote command-execution flaw with high impact (complete confidentiality, integrity, and ava...
CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...
CVE-2001-0271: Undefined Security Weakness
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters...
MAILNEWS mailnews.cgi Arbitrary Command Execution
mailnews.cgi is being hosted on the remote web server. Input to the 'address' parameter is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands with the privileges of the web server. Please note Nessus only checked for the presence of this CGI, and did not...
