CVE-2000-0421

Description

The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.

Affected products

• Mozilla / Bugzilla2.8 – 2.8

References

• MISChttp://www.securityfocus.com/bid/1199
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html