STG Security Advisory: An input validation flaw in GNUBoard versions 3.40 and below can allow malicious attackers to run arbitrary commands with the privilege of the HTTPD process, which is typically run as the nobody user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35584/SSA-20041224-21.txt
Source: https://packetstormsecurity.com/files/35584/STG-Security-Advisory-2004-12-24.21.html