9910 matches found
CVE-2000-0255
The CVE-2000-0255 entry affects the Nbase-Xyplex EdgeBlaster router. The vulnerability arises when an attacker performs a scan for the FormMail CGI program, which can cause a denial of service. Documented impact is network-based, with availability impact described as PARTIAL. The provided sources...
CVE-2000-0977
The CVE-2000-0977 issue affects MailFile 1.10 via mailfile.cgi, where a remote attacker can read arbitrary files by supplying a target filename in the POST parameter and having it emailed to the address in the email parameter. The underlying cause is improper handling of the filename parameter in...
CVE-2000-0912
The CVE-2000-0912 entry concerns the MultiHTML CGI script (multihtml.pl). Affected component: the multihtml.pl CGI. The underlying issue is a traversal/file-access vulnerability where the attacker can specify the file name via the multi parameter, enabling reading of arbitrary files on the remote...
CVE-2000-0868
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/...
CVE-2000-0952
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0255
The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program...
CVE-2000-0923
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...
CVE-2000-0941
The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...
Дырка в CGI wwwwais
Классическое переполнение буфера...
wwwwais QUERY_STRING Parameter Remote Overflow
The 'wwwwais' CGI is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
UltraBoard cgi directory permission problem
Hacksware Bug Report 1. Name: UltraBoard cgi directory permission problem 2. Release Date: 2001.1.12 3. Affected Application: UltraBoard 2000 Personal Edition Version 2.11 http://www.ub2k.com/downloads/UB211PEB1.zip 4. Author: [email protected] 5. Type: Configuration Error 6. Explanation In defau...
Очередные дырки в CGI
Некорректные файловые разрешения...
IIS 5.0 allows viewing files using %3F+.htr
Georgi Guninski security advisory 33, 2001 IIS 5.0 allows viewing files using 3F+.htr Systems affected: IIS 5.0 patched against the file fragment reading vulnerability Risk: Medium Date: 8 January 2001 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may distribute it...
CVE-2000-1132
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable...
CVE-2000-1186
Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header...
CVE-2000-1110
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program...
CVE-2000-1176
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. dot dot attack in the "catsearch" form field...
Informix webdriver CGI Unauthenticated Database Access
The remote host may be running Informix Webdriver, a web-to-database interface. If not configured properly, this CGI script may give an unauthenticated attacker the ability to modify and even delete databases on the remote host. Nessus relied solely on the presence of this CGI; it did not try to...
eXtropia bbs_forum.cgi 1.0 - Arbitrary Command Execution
eXtropia bbsforum.cgi 1.0 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2177/info bbsforum.cgi is a popular Perl cgi script from eXtropia.com. It supports the creation and maintenance of web-based threaded discussion forums. Version 1.0 of bbsforum.cgi fails to properly...