Unscored CVE-2002-0488 EUVD-2002-0485GHSA-f78c-8cv5-7pcp

Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.

References

20020321 PHP script: Penguin Traceroute, Remote Command Execution mailing-list
http://www.linux-directory.com/scripts/traceroute.pl
4332 vdb-entry
penguin-traceroute-command-execution(8600) vdb-entry