CVE-2001-0329

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login…

published May 24, 2001

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03132 · 87.7th percentile
Published
2001-05-24T04:00Z
EPSS history
Timeline
  • 24 MAY 04:00Z
    Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login…
    cvelistv5