← Back

CVE-2001-1241

nvd nist
Published: Jul 17, 2001Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.

Affected (12)

Products: Steve Grimm: Un Cgi
Steve Grimm
1 product
Un Cgi
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Steve Grimm
Un Cgi
Version 1.0
Un Cgi
Version 1.1
Un Cgi
Version 1.2
Un Cgi
Version 1.3
Un Cgi
Version 1.4
Un Cgi
Version 1.5
Un Cgi
Version 1.6.1
Un Cgi
Version 1.6.2
Un Cgi
Version 1.6
Un Cgi
Version 1.7
Un Cgi
Version 1.8
Un Cgi
Version 1.9

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.