30 matches found
EUVD-2001-0617
Malware in sbrugna...
EUVD-2000-0763
Malware in sbrugna...
EUVD-1999-1161
Malware in sbrugna...
OReilly WebSite 1.x/2.0 win-c-sample.exe Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root directory. This program ...
O'Reilly WebSite Pro args.bat Arbitrary Command Execution
The CGI 'args.bat' and/or 'args.cmd' is installed. This CGI has a well known security flaw that lets an attacker upload arbitrary files on the remote web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1146...
CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
CVE-2001-0626
CVE-2001-0626 affects O'Reilly Website Professional
CVE-2001-0626: Undefined Security Weakness
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
CVE-1999-1180
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to 1 args.cmd or 2 args.bat...
CVE-1999-1180
CVE-1999-1180 affects O'Reilly WebSite 1.1e and Website Pro 2.0. The CGI scripts args.bat/args.cmd are vulnerable to remote arbitrary command execution via shell metacharacters in arguments. The NASL entry notes a known exploit path and states there is no known solution at this time; no additiona...
CVE-1999-1180: Undefined Security Weakness
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to 1 args.cmd or 2 args.bat...
CVE-2000-0622
CVE-2000-0622 : Buffer overflow in the Webfind CGI script of O'Reilly WebSite Professional WebServer 2.x (webfind.exe) when processing a too-long keywords parameter. This allows remote attackers to execute arbitrary commands on the affected host; some references describe the impact as potentially...
CVE-2000-0622
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...
CVE-2000-0622: Undefined Security Weakness
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter...
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0769
The CVE-2000-0769 entry concerns O'Reilly WebSite Pro 2.3.7 where uploader.exe is installed with execute permissions for all users, enabling remote attackers to create and execute arbitrary files by directly calling uploader.exe. This describes a direct misuse of file permissions leading to arbit...
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0769: Undefined Security Weakness
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0623
CVE-2000-0623 affects WebSitePro (WebSitePro/WebSite Professional) 2.4 and earlier. A remote attacker can cause a buffer overflow via a long HTTP GET request or Referrer header, potentially allowing arbitrary code execution. Public sources in connected documents identify this as a remote overflow...
CVE-2000-0623: Undefined Security Weakness
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...