/cgi-bin/.cobalt/overflow/overflow.cgi allows command execution.
vulners.com/securityvulns/securityvulns:doc:3849
vulners.com/securityvulns/securityvulns:doc:3869