CVE-2001-0076

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-00775.0The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such CVE-2001-00782.1in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.CVE-2001-00792.1Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log CVE-2001-00805.0Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-CVE-2001-00815.0swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could al CVE-2001-00827.5Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented p CVE-2001-00835.0Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memor CVE-2001-00847.2GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to ga CVE-2001-00857.2Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly exe CVE-2001-00865.0CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by CVE-2001-00877.2itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users t CVE-2001-00887.5common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character,