AX·NEWS
Sign in

Vulnerability

CVE-2000-0411 — Formmail vulnerability

medium 5.0 1 story · 1 outlet

Official record (cve.org)NVDCVE watch

Impacted if

  • Formmail 1.6

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
    USSANS ISC Cybersecurity

    One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the…