Intelligence online17 sources monitored9 actively exploited 7d33 published 24hChecked recently
Vulnerability record

CVE-2000-0411

ElevatedNo known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Description

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2000-0411 scored CVSS 5.0

    Basis: NIST National Vulnerability Database

  2. Disclosed

    The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)

    Basis: SANS Internet Storm Center (security research)

Coverage

References