CVE-2000-0411

Medium

Published: 10/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.36%

94th percentile - higher than 94% of all known CVEs

Summary

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

Risk Assessment

Attackers can exploit this vulnerability to gain sensitive information about the server's environment, potentially leading to further attacks.

Recommendation

It is recommended to update the FormMail script to the latest version or implement appropriate security measures to block access to the env_report parameter.

Original NVD description (English source)

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.