CVE-2001-0307

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.htmlExploit, Patch, Vendor Advisory
http://www.geocities.com/gzhangx/websrv/docs/security.html
http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.htmlExploit, Patch, Vendor Advisory
http://www.geocities.com/gzhangx/websrv/docs/security.html

Timeline

Published: May 3, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03087.5UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by CVE-2001-03095.0inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attacke CVE-2001-03102.1sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle CVE-2001-03114.6Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.CVE-2001-03125.0IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that conta CVE-2001-03135.0Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public netw CVE-2001-03147.5Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute CVE-2001-03157.5The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.CVE-2001-03164.6Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.CVE-2001-03173.7Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running set CVE-2001-03187.5Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usin CVE-2001-03197.5orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn opt