2001-04-04 04:00:00
mitre
PUBLISHED
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.