Unscored CVE-2001-1024 EUVD-2001-1005GHSA-948v-fp8m-mp35

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, …

Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.

References

20010727 Entrust - getAccess mailing-list
entrust-getaccess-execute-commands(6915) vdb-entry