CVE-2000-1014
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
Date published : 2001-01-22
http://www.securityfocus.com/bid/1717
http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html