58 matches found
answerbook2.txt
PTT SECURITY ADVISORY DATE: 08-02-2005 AUTHOR: THOMAS LIAM ROMANIS CURRENT EMPLOYER: Echelon Ltd VENDOR: Sun PRODUCT: Sun AnswerBook2 VERSIONS TESTED: 1.4.4 on Solaris 8.0 Sparc TITLE: Multiple issues in Sun Answerbook2 Full Disclosure. Summary. A number of issues have been identified in Sun...
CVE-2005-0548
Sun AnswerBook2 (Solaris)
CVE-2005-0548
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...
CVE-2005-0549
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...
CVE-2005-0549
CVE-2005-0549 is a cross-site scripting (XSS) vulnerability in Sun/ Solaris AnswerBook2 Documentation 1.4.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the View Log Files function. Affected software is explicitly Sun AnswerBook2 documentation prior to...
CVE-2005-0549: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...
CVE-2005-0548: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...
Sun AnswerBook2 < 1.4.5 XSS
Binary data 2678.prm...
CVE-2005-0548
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...
CVE-2002-2425
Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as 1 AdminViewError and 2 AdminAddadmin via a direct request...
Sun AnswerBook2 format string and other vulnerabilities
------------------------------------------------------------------------ DynaWeb httpd Format String and AnswerBook 2 Unauthenticated Admin Script Execution Vulnerabilities Release Date: August 1, 2002 Application: Solaris ab2 1.4.2 / dwhttpd 4.1a6 with patch 110011-02 and before Severity: Remote...
Sun AnswerBook2 1.x - Unauthorized Administrative Script Access
Sun AnswerBook2 1.x - Unauthorized Administrative Script Access source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface...
Sun AnswerBook2 1.x - Unauthorized Administrative Script Access
source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface. Reportedly, it is possible to access these scripts without...
CVE-2002-0360
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...
CVE-2002-0360
The CVE-2002-0360 issue affects Sun AnswerBook2 1.4–1.4.3, where a buffer overflow in the gettransbitmap CGI allows a remote attacker to execute arbitrary code via a long filename argument. Impact is remote code execution with the daemon privileges; no exploit details are provided in the document...
CVE-2002-0360
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...
eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability
eSO Security Advisory: 5063 Discovery Date: March 1, 2002 ID: eSO:5063 Title: Sun AnswerBook2 gettransbitmap buffer overflow vulnerability Impact: Remote attackers can execute arbitrary code. Affected Technology: Sun AnswerBook2 1.4, 1.4.1, 1.4.2, 1.4.3 Vendor Status: Vendor notified. Discovered...
CVE-2002-0360: Undefined Security Weakness
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...
CVE-1999-1416
CVE-1999-1416 affects the AnswerBook2 (AB2) web server dwhttpd 3.1a4. A remote attacker can trigger a denial of service by sending an HTTP POST with a large Content-Length, exhausting resources. No exploitation details or patches are provided in the connected documents.