PT-2001-2054 · Php Nuke · Network Tools

Published 2001-11-16 · Updated 2019-07-01 · CVE-2001-0899

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Network Tools version 0.2 for PHP-Nuke

Description The issue allows remote attackers to execute commands on the server. This is achieved by injecting shell metacharacters in the hostinput variable.

Recommendations For Network Tools version 0.2, consider restricting or sanitizing input to the hostinput variable to prevent command execution until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2001-0899

Affected Products

Network Tools

References · 5

• 🔥 https://exploit-db.com/exploits/21155 · Exploit
• http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2001-0899 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7578 · Note
• http://marc.info/?l=bugtraq&m=100593523104176&w=2 · Note