VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 2, 2001· Updated Jun 16, 2026

CVE-2001-1130

CVE-2001-1130

Description

Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • SUSE S.A./Linux6 versions
    cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*
  • Novell/Suse Linuxllm-fuzzy
    Range: 6.0-7.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.