National Vulnerability Database (CVE-2000-0432)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0432
Orirignal release date: 2000-05-16 Source: US-CERT/NIST ### Overview The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: input Impact Type: sec_prot user="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: BID 1215 Hyperlink: http://securityfocus.com/bid/1215 External Source: Matt Kruse Name: http://mkruse.netexpress.net/scripts/calendar/bugfix.html patch=1 Hyperlink: http://mkruse.netexpress.net/scripts/calendar/bugfix.html patch=1 External Source: Bugtraq Name: Vuln in calender.pl (Matt Kruse calender script) Hyperlink: http://www.securityfocus.com/archive/1/60376 ### Vulnerable Software and Vendor Calendar Script (Matt Kruse) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0432