PT-2002-1540 · Linux · Linux Directory Penguin Nslookup Cgi Script

Published 2002-06-11 · Updated 2016-10-18 · CVE-2002-0489

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Directory Penguin NsLookup CGI script version 1.0

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in the query or type parameters of the CGI script.

Recommendations For version 1.0, consider restricting access to the nslookup.pl script until a patch is available, and avoid using the query and type parameters in the CGI script until the issue is resolved.

Fix

Related Identifiers

CVE-2002-0489

Affected Products

Linux Directory Penguin Nslookup Cgi Script

References · 4

• http://securityfocus.com/bid/4353 · Vendor Advisory
• http://iss.net/security_center/static/8601.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0489 · Security Note
• http://marc.info/?l=bugtraq&m=101684215209558&w=2 · Note