httpd: AllowOverride Options=IncludesNoExec allows Options Includes

The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring 1 Options Includes, 2 Options +Includes, or 3 Options +IncludesNOEXEC in a .htaccess file, and then...

PT-2001-2056 · Hypermail · Hypermail

Name of the Vulnerable Software and Affected Versions: Hypermail affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands on a server that supports Server Side Includes SSI by attaching a file with a .shtml extension. This attachment is then...

CVE-2000-1077

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension...

CVE-2000-1077

CVE-2000-1077 corresponds to a buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x. The vulnerability arises when processing a filename with a .shtml extension that is excessively long, enabling remote attackers to execute arbitrary commands. Multiple sources corroborate ...

CVE-2000-1077

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension...

Дырка в iPlanet (SHTML parsing)

Переполнение буфера при запросе к .shtml- файлу определенной длинны...

IIS 5.0 cross site scripting vulnerability - using .shtml files or /_vti_bin/shtml.dll

Georgi Guninski security advisory 19, 2000 IIS 5.0 cross site scripting vulnerability - using .shtml files or /vtibin/shtml.dll This advisory describes two vulnerabilites one is already fixed by Microsoft but I decided to put them together. Systems affected: IIS 5.0/Windows 2000. Exploited with...

PT-2000-1102 · Microsoft · Shtml.Dll +1

Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...