Description
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
References
- 20010218 mailnews.cgi mailing-list
- 2391 vdb-entry
Unscored
CVE-2001-0271
EUVD-2001-0271GHSA-72gx-jhgh-xcv8
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
Published Apr 4, 2001 · Updated Aug 8, 2024 · Assigned by mitre