CVE-2001-0808: Yngve Svendsen Gnatsweb

High severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

Affected products

• Yngve Svendsen Gnatsweb: version 2.7_beta only; version 2.8.0 only; version 2.8.1 only; version 3.95 only

Published 2001-12-06. Last modified 2026-06-16.