gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.
                
            References
                    | Link | Resource | 
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html | Patch Vendor Advisory | 
| http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html | Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 | |
| http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html | Patch Vendor Advisory | 
| http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html | Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6753 | 
Configurations
                    Configuration 1 (hide)
            
            
  | 
    
History
                    No history.
Information
                Published : 2001-12-06 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-0808
Mitre link : CVE-2001-0808
CVE.ORG link : CVE-2001-0808
JSON object : View
Products Affected
                yngve_svendsen
- gnatsweb
 
CWE
                