Unscored CVE-2001-0808 EUVD-2001-0792GHSA-jv2h-8qmf-grhx

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_fil…

Published Nov 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

References

gnatsweb-helpfile-execute-commands(6753) vdb-entry
http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html
20010627 gnats update mailing-list