high7.5Public exploit code
CVE-2001-0400
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- nph-maillist 3.0/3.5 - Arbitrary Code Execution2001-04-10 · remote · cgi · Verified
Impact
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Tourtillott | Nph-Maillist | Versions 3.0, 3.5 |