Vulnerabilities > CVE-2001-1241 - Unspecified vulnerability in Steve Grimm Un-Cgi

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
steve-grimm
NVD
Published: 2001-07-17
Updated: 2008-09-10

Summary

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.

Vulnerable Configurations

Part Description Count
Application
Steve_Grimm
12

References