PT-2000-1463 · Mailstudio · Mailstudio 2000

Published 2000-06-09 · Updated 2008-09-10 · CVE-2000-0527

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MailStudio 2000 versions 2.0 and earlier

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the userreg.cgi CGI program.

Recommendations For MailStudio 2000 versions 2.0 and earlier, consider disabling the userreg.cgi CGI program until a patch is available to prevent remote attackers from executing arbitrary commands.

Exploit

Fix

Related Identifiers

CVE-2000-0527

Affected Products

Mailstudio 2000

References · 4

• 🔥 https://exploit-db.com/exploits/20007 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0527 · Security Note
• http://securityfocus.com/bid/1335 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html · Note