CVE-2001-1241

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary…

published May 3, 2002

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03870 · 90.2th percentile
Published
2002-05-03T04:00Z
EPSS history
Timeline
  • 03 MAY 04:00Z
    Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary…
    cvelistv5