webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

AUSCERT:AA-97.14 | BID:374 | URL:http://www.securityfocus.com/bid/374 | BUGTRAQ:19970507 Re: SGI Advisory: webdist.cgi | BUGTRAQ:19970507 Re: SGI Security Advisory 19970501-01-A - Vulnerability in | CERT:CA-1997-12 | URL:http://www.cert.org/advisories/CA-1997-12.html | OSVDB:235 | URL:http://www.osvdb.org/235 | SGI:19970501-02-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX | XF:http-sgi-webdist(333) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/333