Vulnerability in Yngve Svendsen Gnatsweb

CVE-2001-0808

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

EPSS: 0.035 (88.0th percentile) — read the EPSS interpretation.

Affected products

Yngve_svendsen Gnatsweb — versions 2.7_beta, 2.8.0, 2.8.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)