Lucene search

ex_anhttpd.txt

🗓️ 05 Nov 1999 00:00:00Reported by shadowpenguinType

packetstorm🔗 packetstormsecurity.com👁 20 Views

AN-HTTPd 1.20b has remote command execution issue. Remove dangerous test CGIs or upgrade to 1.21.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`[ by Message ] [ by Thread ]  
[ Post ][ Reply ]   

To: BugTraq   
Subject: Some holes for Win/UNIX softwares   
Date: Tue Nov 02 1999 22:39:56   
Author: UNYUN   
Message-ID: <[email protected]>   

------------------------------------------------------------------------  

(3) AN-HTTPd 1.20b  

Problem:  
The test CGIs which are distributed with AN-HTTPd 1.20b contain the  
remote command execution problem.  

Solution:  
[1] remove the following test CGIs.  
cgi-bin/test.bat  
cgi-bin/input.bat  
cgi-bin/input2.bat  
ssi/envout.bat  
[2] Ver1.21 has been released at the official site.  
http://www.st.rim.or.jp/~nakata/  

Exploit:  
(example)  
http://www.xxx.yy/cgi-bin/input.bat?|dir..\..\windows  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Nov 1999 00:00Current

7.4High risk

Vulners AI Score7.4