CVE

Id
4045  
CVE No.
CVE-2001-1241  
Status
Candidate  
Description
Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.  
Phase
Proposed (20020502)  
Votes
ACCEPT(3) Cole, Frech, Green | NOOP(3) Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18765 4045 CVE-2001-1241 BUGTRAQ:20010717 multiple vulnerabilities in un-cgi  View
18766 4045 CVE-2001-1241 URL:http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html  View
18767 4045 CVE-2001-1241 BUGTRAQ:20010718 Re: [Khamba Staring <purrcat@edoropolis.org>] multiple  View
18768 4045 CVE-2001-1241 URL:http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html  View
18769 4045 CVE-2001-1241 CONFIRM:http://www.midwinter.com/~koreth/uncgi.html  View
18770 4045 CVE-2001-1241 CONFIRM:http://www.midwinter.com/~koreth/uncgi-changes.html  View
18771 4045 CVE-2001-1241 BID:3057  View
18772 4045 CVE-2001-1241 URL:http://www.securityfocus.com/bid/3057  View
18773 4045 CVE-2001-1241 XF:uncgi-unexecutable-cgi(6847)  View

Related JVN