CVEvulnerability

CVE-2001-0808

10.0 HIGH Published 2001-12-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-12-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

Affected configurations

• yngve svendsen gnatsweb 2.7 beta • yngve svendsen gnatsweb 2.8.0 • yngve svendsen gnatsweb 2.8.1 • yngve svendsen gnatsweb 3.95

References

http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html Patch, Vendor Advisory
http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 exchange.xforce.ibmcloud.com
http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html Patch, Vendor Advisory
http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 exchange.xforce.ibmcloud.com