CVE-2000-1014

EPSS 11.5%

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/20242unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5291 http://www.osvdb.org/3240 http://www.securityfocus.com/bid/1717