Back to CVE Browser

CVE-2001-0113

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0300%

EPSS Percentile1.13th

PublishedMar 12, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Affected Platforms (CPE)

📦

Omnicron

Omnihttpd

= 2.0.7

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html

🔗 http://www.securityfocus.com/bid/2211

🔗 http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html

🔗 http://www.securityfocus.com/bid/2211

Related Vulnerabilities

CVE-1999-095110.0

Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.

CVE-2004-22997.5

Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request w...

CVE-2001-01145.0

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.

CVE-2001-06135.0

Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long PO...