Unscored severity · published Oct 18, 2001
CVE-2001-0733
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file…
–
CVSS
2.8%
EPSS
No
On KEV
Description
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Eperl · Ralf S. Engelschall
through 2.2.14; 2.0; 2.0.1; 2.0.2; 2.0.3; 2.1; +16 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0733
Patch
http://www.securityfocus.com/archive/1/192711
Vendor Advisory
http://www.securityfocus.com/bid/2912
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6743
More from Eperl
–
CVE-2001-0458
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands
–
CVE-1999-1437
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml