Vulnerability in Omnicron Omnihttpd

CVE-2001-0113

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

EPSS: 0.104 (95.2th percentile) — read the EPSS interpretation.

Affected products

Omnicron Omnihttpd — versions 2.0.7
N/a — versions n/a

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)