CVE-2001-0180 Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.

HighCVSS 10.0 EPSS 4.7%

Published: 2001-03-09 07:00
Updated: 2026-06-17 00:53
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.

Affected products

Product	Affected versions	Fixed in
lars ellingsen guestserver	<= 4.12	No fix listed

References

20010129 Remote Command Execution in guestserver.cgi + exploit exploit mailing-list patch vendor-advisory
guestserver-cgi-execute-commands(6027) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 4.68% (percentile 91.9)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.