CVE-2001-0980 docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux server | = 3.1 | No fix listed |
| caldera openlinux workstation | = 3.1 | No fix listed |
References
- CSSA-2001-026.0 patch vendor-advisory
- 3052 exploit vdb-entry vendor-advisory
- docview-httpd-command-execution(6854) vdb-entry