CVE-2001-1241
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/07/2001
Last modified:
03/04/2025
Description
Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:steve_grimm:un-cgi:1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.6.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.6.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:steve_grimm:un-cgi:1.9:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html
- http://www.iss.net/security_center/static/6847.php
- http://www.midwinter.com/~koreth/uncgi-changes.html
- http://www.midwinter.com/~koreth/uncgi.html
- http://www.securityfocus.com/bid/3057
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html
- http://www.iss.net/security_center/static/6847.php
- http://www.midwinter.com/~koreth/uncgi-changes.html
- http://www.midwinter.com/~koreth/uncgi.html
- http://www.securityfocus.com/bid/3057