medium5.0Public exploit code
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Matt Wright FormMail 1.6/1.7/1.8 - Environmental Variables Disclosure2000-05-10 · remote · multiple · Verified
Impact
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Wright | Formmail | Version 1.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0125.html
- http://www.perfectotech.com/blackwatchlabs/vul5_10.html
- http://www.securityfocus.com/bid/1187
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0125.html
- http://www.perfectotech.com/blackwatchlabs/vul5_10.html
- http://www.securityfocus.com/bid/1187