First published: Mon Jan 17 2000(Updated: )
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nortel Contivity | =1.0 | |
=1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0064 has been classified as a denial of service vulnerability.
To mitigate CVE-2000-0064, it is recommended to upgrade to a fixed version of the Nortel Contivity or implement input validation on CGI parameters.
CVE-2000-0064 can allow remote attackers to crash the HTTP server, leading to service disruption.
CVE-2000-0064 affects Nortel Contivity version 1.0.
CVE-2000-0064 can be exploited through simple HTTP requests with malformed URLs, making it relatively easy to trigger.