58 matches found
CVE-1999-1417
Format string vulnerability in AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged...
CVE-1999-1417: Undefined Security Weakness
Format string vulnerability in AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged...
CVE-1999-1416: Undefined Security Weakness
AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service resource exhaustion via an HTTP POST request with a large content-length...
Denial of Service Vulnerability in Sun AnswerBook2
Topic: Denial of Service Vulnerability in Sun AnswerBook2 Date: 10/24/2000 Status: Vendor Contacted 10/10/2000, Currently unsolved Scope: Local and Remote Denial of Service Platforms: SunOS 5.6, Presumably any running AnswerBook2 Authors: Dave Monnier, Dick Repasky Unix Workstation Support Group...
CVE-2000-0696
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...
CVE-2000-0696
The CVE-2000-0696 entry concerns the dwhttpd web server’s administration interface in Solaris AnswerBook2 . The vulnerability arises because the admin interface does not properly authenticate requests to its supporting CGI scripts, enabling a remote attacker to add user accounts by directly invok...
CVE-2000-0697
The connected Nessus entry identifies a concrete vulnerability: Sun AnswerBook2 Web Server dwhttpd is vulnerable to a GET request remote format string attack. Affected versions include dwhttp/4.0.2a7a and dwhttpd/4.1a6. Successful exploitation can crash the server or allow arbitrary code executio...
CVE-2000-0696
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...
CVE-2000-0696: Undefined Security Weakness
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...
CVE-2000-0697: Undefined Security Weakness
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...
Дырка в Sun AnswerBook2
Непривилигированные пользователи могут получить доступ к интерфейсу администрирования, а так же выполнять программный код на сервере...
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access
source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...
Security Bulletin #00196
Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00196 Date: August 07, 2000 Cross-Ref: S21SEC-004 Title: AnswerBook2 The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the information contained in this...
Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server
ID: S21SEC-004-en Title: Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server Date: 07/08/2000 Status: Vendor contacted, Solved Scope: Remote command execution Platforms: Solaris 2.6, Solaris 8 Author: llmora Location: http://www.s21sec.com/en/avisos/s21sec-004-en.txt Release: Public S 2 1 S...
Solaris AnswerBook2 - Remote Command Execution
Solaris AnswerBook2 - Remote Command Execution source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine...
Solaris AnswerBook2 - Remote Command Execution
source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine running AnswerBook2. These commands will be execute...
CVE-1999-1417
Format string vulnerability in AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged...