Learn
active
Classic CGI Email Script Vulnerabilities (CVE-2000-0411) Revisited
- Engineer — Learn: A retrospective on 26-year-old CGI email script flaws (env variable leakage, header injection, sendmail command injection) that may still lurk in legacy environments; worth auditing for any surviving CGI-bin scripts, but EPSS 0.08 and no KEV listing mean there’s no urgent patching pressure.
- SOC/IR — Skip
- Leader — Skip
- Signals: CVE-2000-0411 — CISA KEV: not listed, EPSS 0.08, no public PoC found
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.