CVE-2002-0489 Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
HighCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux directory penguin nslookup | = 1.0 | No fix listed |
References
- 20020322 Re: PHP script: Penguin Traceroute, Remote Command Execution mailing-list
- penguin-nslookup-command-execution(8601) vdb-entry vendor-advisory
- 4353 vdb-entry vendor-advisory