high7.5Public exploit code
CVE-2001-0307
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bajie 0.78 - Arbitrary Shell Command Execution2001-02-15 · remote · multiple · Verified
Impact
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bajie | Java Http Server | through 0.79 |