webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/333
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-0039