CVE-2000-0207: High severity SGI InfoSearch vulnerability

Published Mar 1, 2000

Updated

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

Affected Software

10 affected components

SGI InfoSearch=1.0

SGI IRIX=6.5

SGI IRIX=6.5.1

SGI IRIX=6.5.2m

SGI IRIX=6.5.3

SGI IRIX=6.5.3f

SGI IRIX=6.5.3m

SGI IRIX=6.5.4

SGI IRIX=6.5.6

SGI IRIX=6.5.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove SGI InfoSearch (infosrch.cgi) from your environment.
Remove or uninstall the infosrch.cgi CGI program from affected systems (delete or rename the file) to prevent remote command execution.
Configuration
Disable execution of infosrch.cgi in the web server configuration (for example, remove it from cgi-bin, disable CGI execution for the hosting path, or change file permissions to prevent execution).
Web server CGI handling / SGI InfoSearch (infosrch.cgi) infosrch.cgi enabled = false
Compensating control
Restrict access to the web path hosting infosrch.cgi to trusted IPs via firewall rules or web server access controls; block or filter external HTTP requests to the script.
Operational
Examine web server and system logs for signs of exploitation, perform integrity checks on affected hosts, and if compromise is suspected rotate credentials and rebuild or remediate affected systems.

Event History

Mar 1, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Apr 10, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0207?

CVE-2000-0207 is considered to have a critical severity rating due to the potential for remote command execution.

How do I fix CVE-2000-0207?

To fix CVE-2000-0207, update the SGI InfoSearch software to the latest version or apply any available patches that address this vulnerability.

What software versions are affected by CVE-2000-0207?

CVE-2000-0207 affects SGI IRIX versions 6.5.1, 6.5.2m, 6.5.3, 6.5.3f, 6.5.3m, 6.5.4, 6.5.6, and 6.5.7, as well as SGI InfoSearch version 1.0.

Can CVE-2000-0207 be exploited remotely?

Yes, CVE-2000-0207 can be exploited remotely by attackers if they can send crafted requests to the vulnerable CGI program.

What type of vulnerability is CVE-2000-0207?

CVE-2000-0207 is a command injection vulnerability that allows attackers to execute arbitrary commands on the server.