CVE-2005-3096 in nslookup.cgi

Summary

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 09/28/2005
• Disclosure: 09/28/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-26451
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 7.3
• EPSS: 0.03811
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3096
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3096
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3096/