PT-2000-1976 · Poll It · Poll It

Published 2000-12-11 · Updated 2017-10-10 · CVE-2000-1068

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Poll It version 2.0

Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the poll options parameter.

Recommendations For Poll It version 2.0, consider restricting access to the pollit.cgi script until a patch is available, or avoid using the poll options parameter in a way that could allow shell metacharacter injection.

Fix

Related Identifiers

CVE-2000-1068

Affected Products

Poll It

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-1068 · Security Note
• http://cgi-world.com/pollit.html · Note
• http://marc.info/?l=bugtraq&m=97236719315352&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5792 · Note