tag: Legacy-Vulnerabilities · 1 items
- Engineer — Learn: A retrospective on 26-year-old CGI email script flaws (env variable leakage, header injection, sendmail command injection) that may still lurk in legacy environments; worth auditing for any surviving CGI-bin scripts, but EPSS 0.08 and no KEV listing mean there’s no urgent patching pressure.
- SOC/IR — Skip
- Leader — Skip
- Signals: CVE-2000-0411 — CISA KEV: not listed, EPSS 0.08, no public PoC found