gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html | Patch Vendor Advisory |
| http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 | |
| http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html | Patch Vendor Advisory |
| http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html - Patch, Vendor Advisory | |
| References | () http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html - Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 - |
Information
Published : 2001-12-06 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-0808
Mitre link : CVE-2001-0808
CVE.ORG link : CVE-2001-0808
JSON object : View
Products Affected
yngve_svendsen
- gnatsweb
CWE
