CVE-2000-0411 describes an information disclosure vulnerability in Matt Wright's FormMail CGI script, specifically affecting versions 1.6, 1.7, and 1.8. An unauthenticated remote attacker can exploit this flaw by manipulating the "env_report" parameter to obtain sensitive environmental variables from the server. This medium-severity vulnerability (CVSS 5.0) allows for partial confidentiality impact without affecting integrity or availability. While not actively exploited or on the CISA KEV list, public exploit code exists (EDB-19906), though there is no evidence of broader community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.6CPE matchmatch criteria | cpe:2.3:a:matt_wright:formmail:1.6:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.