CVE:CVE-2000-0670
CNNVD:CNNVD-200007-033
CVSWeb 1.80版本中cvsweb CGI脚本存在漏洞。带有到CVS储存器的写访问的远程攻击者借助shell元字符来执行任意命令。
solution:Upgrade cvsweb_developer cvsweb to a higher version than 1.80,and avoid the version 1.80