Security readout for executives and security teams
Plain-English summary
CVE-2000-0952 is an old remote command execution issue in the global.cgi CGI program shipped with Global 3.55 and earlier on NetBSD. If exposed through a web server, an attacker could cause the server to run arbitrary operating system commands. No public source in the bundle indicates active exploitation.
Executive priority
Prioritize if legacy NetBSD web services are internet-facing or business-critical. This is remote command execution, but the technology is old and exposure may be narrow. Treat confirmed exposed instances as urgent remediation items.
Technical view
The CVE describes shell metacharacter handling in global.cgi for Global 3.55 and earlier on NetBSD. Remote attackers can pass crafted input that is interpreted by a shell, resulting in arbitrary command execution in the CGI process context. CVSS and CWE data are not provided in the supplied sources.
Likely exposure
Exposure is likely limited to legacy NetBSD web servers running Global 3.55 or earlier with global.cgi installed and reachable over HTTP. Organizations not using this CGI program or NetBSD deployment path are unlikely to be affected based on the provided sources.
Exploitation context
The issue is remotely reachable when the CGI endpoint is exposed. The sources do not state authentication requirements, exploit availability, observed exploitation, or ransomware use. It is not listed as CISA KEV in the provided bundle.
Researcher notes
Evidence is sparse: the CVE record and IBM X-Force entry identify the affected CGI, version boundary, platform, and command execution condition. No patch identifier, CVSS score, CWE, or exploitation telemetry is included in the supplied sources.
Mitigation direction
- Identify and disable any exposed global.cgi instances if not required.
- Check vendor or project guidance for fixed Global versions or safe configuration.
- Restrict CGI access to trusted networks where removal is not immediately possible.
- Retire unsupported legacy NetBSD web applications where feasible.
Validation and detection
- Inventory NetBSD web servers for Global installations.
- Confirm whether Global version is 3.55 or earlier.
- Check web server configuration for reachable global.cgi paths.
- Review historical web logs for suspicious requests to global.cgi.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2000-0952 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- global-execute-remote-commands(5424)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.