SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.Referenceshttp://www.securityfocus.com/bid/1031ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P