CVE

Id
4018  
CVE No.
CVE-2001-1214  
Status
Candidate  
Description
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.  
Phase
Modified (20050510)  
Votes
ACCEPT(1) Frech | NOOP(6) Christey, Cole, Foat, Green, Wall, Ziese  
Comments
Christey> I can"t find anything about "Marcus S. Xenakis" on the web at | all, except for vulnerability reports. | CHANGE> [Green changed vote from ACCEPT to NOOP] | Green> The more I looked again today the more circular the references | were getting. And there"s no single pointer to a Marcus | Xenakis site. So, I"ll have to modify the vote to a NOOP. | Christey> A similar issue is in CVE-2002-0434, but CVE-2002-0434 is for | manual.php.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18613 4018 CVE-2001-1214 BUGTRAQ:20011215 *ALERT* "Unix Manual" PHP-Script allows arbitrary code execution  View
18614 4018 CVE-2001-1214 URL:http://www.securityfocus.com/archive/1/247332  View
18615 4018 CVE-2001-1214 CERT-VN:VU#672419  View
18616 4018 CVE-2001-1214 URL:http://www.kb.cert.org/vuls/id/672419  View
18617 4018 CVE-2001-1214 XF:unixmanual-php-command-execution(7719)  View
18618 4018 CVE-2001-1214 URL:http://www.iss.net/security_center/static/7719.php  View
18619 4018 CVE-2001-1214 BID:3718  View

Related JVN