CVE-2001-0025 ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

HighCVSS 10.0 EPSS 12.3%

Published: 2001-02-02 07:00
Updated: 2026-06-17 00:53
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

Affected products

Product	Affected versions	Fixed in
leif m. wright ad.cgi	= 1.0	No fix listed

References

20001211 Insecure input validation in ad.cgi exploit mailing-list
2103 exploit vdb-entry vendor-advisory
http-cgi-ad(5741) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 12.27% (percentile 96.2)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Leif M. Wright - 'ad.cgi' 1.0 Unchecked Input Exploit · Exploit Database (OffSec) · 2000-12-11