PT-2000-1976 · Poll It · Poll It

Publicado 2000-12-11 · Atualizado 2017-10-10 · CVE-2000-1068

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Poll It version 2.0

Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the poll options parameter.

Recommendations For Poll It version 2.0, consider restricting access to the pollit.cgi script until a patch is available, or avoid using the poll options parameter in a way that could allow shell metacharacter injection.

Correção

Identificadores relacionados

CVE-2000-1068

Produtos afetados

Poll It

Referências · 4

• http://cgi-world.com/pollit.html · Nota
• http://marc.info/?l=bugtraq&m=97236719315352&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5792 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1068 · Nota de Segurança