Legacy-Vulnerabilities on CuraSechttps://curasec.metacog.co.kr/tags/legacy-vulnerabilities/Recent content in Legacy-Vulnerabilities on CuraSecHugoen-usWed, 04 Nov 2026 18:40:06 +0000Classic CGI Email Script Vulnerabilities (CVE-2000-0411) Revisitedhttps://curasec.metacog.co.kr/insights/2026-11-04-the-classics-return-vulnerable-e-mail-scripts-wed-nov-4th/Wed, 04 Nov 2026 18:40:06 +0000https://curasec.metacog.co.kr/insights/2026-11-04-the-classics-return-vulnerable-e-mail-scripts-wed-nov-4th/<ul> <li><strong>Engineer — Learn:</strong> A retrospective on 26-year-old CGI email script flaws (env variable leakage, header injection, sendmail command injection) that may still lurk in legacy environments; worth auditing for any surviving CGI-bin scripts, but EPSS 0.08 and no KEV listing mean there&rsquo;s no urgent patching pressure.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2000-0411 — CISA KEV: not listed, EPSS 0.08, no public PoC found</li> </ul>