CVE-2001-0901

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-11-19 · updated 2026-06-16
Weakness: CWE-434

Description

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment.

Affected products

Hypermail Development Hypermail: all versions

References

http://marc.info/?l=bugtraq&m=100626603407639&w=2
http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz
https://exchange.xforce.ibmcloud.com/vulnerabilities/7576
http://marc.info/?l=bugtraq&m=100626603407639&w=2
http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz
https://exchange.xforce.ibmcloud.com/vulnerabilities/7576

Get alerted when CVE-2001-0901 or the next vulnerability affects your stack