cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
http://www.securityfocus.com/archive/1/250545
http://www.sambar.com/security.htm
http://www.iss.net/security_center/static/7894.php
http://www.der-keiler.de/Mailing-Lists/securityfocus/bugtraq/2002-02/0083.html