critical10.0Public exploit code
CVE-2000-0941
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kootenay Web Inc whois 1.0 - Remote Command Execution2000-10-29 · remote · cgi · Verified
Impact
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kootenay Web Inc | Kootenay Web Inc Whois | Version 1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html
- http://www.kootenayweb.bc.ca/scripts/whois.txt
- http://www.securityfocus.com/bid/1883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5438
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html
- http://www.kootenayweb.bc.ca/scripts/whois.txt
- http://www.securityfocus.com/bid/1883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5438