CVE-2001-0980

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/3052Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6854
http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/3052Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6854

Timeline

Published: Jul 17, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-098110.0HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the CVE-2001-09825.0Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files o CVE-2001-09834.6UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt th CVE-2001-09844.6Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with CVE-2001-09857.5shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page"CVE-2001-09865.0SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, fil CVE-2001-09877.5Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by cau CVE-2001-09887.2Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwr CVE-2001-09897.2Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign CVE-2001-09904.6Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a li CVE-2001-09917.5Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other CVE-2001-09927.5shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" paramete